maptiler-sdk-js

Pass

Audited by Gen Agent Trust Hub on Mar 23, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides comprehensive and well-structured documentation for using the MapTiler SDK JS. All instructions are aligned with legitimate developer workflows.
  • [CREDENTIALS_UNSAFE]: The skill promotes secure secret management. It explicitly advises against hardcoding API keys and provides specific instructions for using framework-standard environment variables such as VITE_MAPTILER_API_KEY, NEXT_PUBLIC_MAPTILER_API_KEY, and REACT_APP_MAPTILER_API_KEY.
  • [COMMAND_EXECUTION]: The script scripts/install-deps.sh facilitates the installation of official @maptiler scoped packages using standard npm install commands. This is routine behavior for a development-focused skill.
  • [EXTERNAL_DOWNLOADS]: The skill references official and well-known MapTiler domains (cdn.maptiler.com, api.maptiler.com) for CSS, JavaScript, and map data. These downloads are essential for the skill's functionality and originate from trusted vendor infrastructure.
  • [PROMPT_INJECTION]: The content within SKILL.md and README.md is strictly instructional and technical. It contains no attempts to bypass agent safety filters, extract system prompts, or override core instructions.
  • [DATA_EXFILTRATION]: There are no patterns suggesting unauthorized data collection or exfiltration. All network requests are directed to official MapTiler API endpoints required for map rendering and geographic services.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 23, 2026, 12:57 PM
Security Audit — agent-trust-hub — maptiler-sdk-js