maptiler-sdk-js
Pass
Audited by Gen Agent Trust Hub on Mar 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides comprehensive and well-structured documentation for using the MapTiler SDK JS. All instructions are aligned with legitimate developer workflows.
- [CREDENTIALS_UNSAFE]: The skill promotes secure secret management. It explicitly advises against hardcoding API keys and provides specific instructions for using framework-standard environment variables such as
VITE_MAPTILER_API_KEY,NEXT_PUBLIC_MAPTILER_API_KEY, andREACT_APP_MAPTILER_API_KEY. - [COMMAND_EXECUTION]: The script
scripts/install-deps.shfacilitates the installation of official@maptilerscoped packages using standardnpm installcommands. This is routine behavior for a development-focused skill. - [EXTERNAL_DOWNLOADS]: The skill references official and well-known MapTiler domains (
cdn.maptiler.com,api.maptiler.com) for CSS, JavaScript, and map data. These downloads are essential for the skill's functionality and originate from trusted vendor infrastructure. - [PROMPT_INJECTION]: The content within
SKILL.mdandREADME.mdis strictly instructional and technical. It contains no attempts to bypass agent safety filters, extract system prompts, or override core instructions. - [DATA_EXFILTRATION]: There are no patterns suggesting unauthorized data collection or exfiltration. All network requests are directed to official MapTiler API endpoints required for map rendering and geographic services.
Audit Metadata