bump-maplibre-gl-js
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill employs standard development commands such as
./gradlew,mise,git,cp, anddiffto manage dependencies, perform file comparisons, and execute project tests. These operations are routine for maintaining a software project and are restricted to the local development environment. - [EXTERNAL_DOWNLOADS]: The skill references the official MapLibre GL JS changelog on GitHub to identify breaking changes and new features. This is a trusted reference to the vendor's own documentation.
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to analyze local TypeScript declaration files (
.d.ts) and project source code to guide the binding update process. This interaction with local project data is a standard development activity with no elevated risk.
Audit Metadata