remotion-maps
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFE
Full Analysis
- [CREDENTIALS_UNSAFE]: The skill correctly instructs users to use environment variables for sensitive API keys (Mapbox, MapTiler, Google Maps), avoiding hardcoded secrets. This is a recommended security best practice.
- [EXTERNAL_DOWNLOADS]: The skill references official API endpoints and CDNs for well-known mapping services, including MapTiler, Mapbox, Google Maps, and Unpkg for library workers. These resources are from established and reputable technology providers.
- [REMOTE_CODE_EXECUTION]: Local scripts are provided for geographic data preprocessing, such as path smoothing and metadata generation. These scripts operate exclusively on local files and do not download or execute arbitrary code from the internet.
- [DYNAMIC_EXECUTION]: The skill employs a standard technique to load MapLibre web workers using a blob URL that imports from a well-known CDN (unpkg.com). This is a routine implementation pattern for initializing map libraries in a browser-based environment.
- [DATA_EXFILTRATION]: No evidence of unauthorized access to sensitive system files or exfiltration of user data was detected. Network activity is restricted to communication with official mapping service providers as part of the intended functionality.
Audit Metadata