route-map-visualizer
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFE
Full Analysis
- CSV Injection Mitigation: The skill proactively addresses potential CSV injection by sanitizing data exported to CSV files. The
_csv_cellfunction inscripts/map_generator.pyidentifies characters that commonly trigger formula execution in spreadsheet software (such as=,+,-, and@) and prefixes them with a tab character to ensure they are treated as literal text when the CSV is opened. - Offline Core Logic: The primary processing of map data occurs within the provided Python environment without making outbound network requests. External mapping and routing functionality is delegated to the user's browser through the generated interactive HTML, which utilizes established services like OpenStreetMap and OSRM.
- Input Validation: Payload parameters such as geographic coordinates, travel profiles, and hex color codes undergo validation checks. Latitude and longitude are verified to be within valid geographic bounds, and color inputs are validated against a hexadecimal regular expression before processing.
- Secure Image Rendering: The skill utilizes the
matplotlib'Agg' backend, ensuring that PNG map generation is handled safely and efficiently in non-interactive or server-side environments without requiring a system display driver. - Standard Service Integrations: The generated interactive maps and deep links integrate with reputable technology platforms including OpenStreetMap, Leaflet.js, OSRM, Google Maps, Apple Maps, and Bing Maps, following industry-standard patterns for geographic visualization.
Audit Metadata