remotion-maps
Pass
Audited by Gen Agent Trust Hub on Nov 8, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill includes Node.js scripts (
prep-cesium-path.mjs,prep-geo.mjs) designed to process geospatial data locally. These scripts perform coordinate-based haversine calculations and standard file system operations to generate optimized JSON and GeoJSON outputs for map animations. - [EXTERNAL_DOWNLOADS]: Instructions recommend installing standard packages from official registries (e.g.,
mapbox-gl,maplibre-gl,@turf/turf). It also provides guidance on fetching map tiles and styles from well-known and reputable services such as Mapbox, MapTiler, and Google Maps. - [CREDENTIALS_SAFE]: The documentation correctly identifies the need for API keys for various map providers and instructs users to manage these via environment variables (e.g.,
REMOTION_MAPBOX_TOKEN) rather than hardcoding them into the project code. - [DYNAMIC_EXECUTION]: Integration examples for MapLibre utilize a standard pattern for loading web workers from a CDN using
URL.createObjectURLandBlob. This is a common and legitimate practice in web development to ensure workers are loaded correctly in diverse environments.
Audit Metadata