remotion-maps
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches the CesiumJS library from its official CDN (cesium.com) and MapLibre workers from unpkg.com. These are well-known, trusted sources for these libraries and are documented neutrally as required resources.\n- [CREDENTIALS_SAFE]: The documentation correctly instructs users to manage API keys for Mapbox, MapTiler, and Google Maps through environment variables (e.g., REMOTION_MAPTILER_KEY, REMOTION_MAPBOX_TOKEN) rather than hardcoding them, aligning with security best practices.\n- [COMMAND_EXECUTION]: The included Node.js utility scripts (prep-cesium-path.mjs, prep-geo.mjs) use standard file system APIs to process local GeoJSON data. These scripts operate solely on project assets and do not perform suspicious system or network actions.\n- [DYNAMIC_EXECUTION]: The skill uses standard script injection to load the CesiumJS mapping engine from the official provider CDN, which is a common and appropriate method for integrating large GIS libraries into web components.
Audit Metadata