remotion-maps
Pass
Audited by Gen Agent Trust Hub on Jul 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
CesiumFlythrough.tsxcomponent dynamically loads the CesiumJS library from the official Cesium CDN (https://cesium.com/downloads/cesiumjs/releases/1.143/Build/Cesium/Cesium.js). This is a standard and documented integration method for CesiumJS in web applications. - [EXTERNAL_DOWNLOADS]: The skill references and fetches map tiles and 3D data from established technology providers, including Google Maps (
tile.googleapis.com) and MapTiler (api.maptiler.com), which are required for the skill's primary mapping functionality. - [SAFE]: Secret management follows industry best practices. API keys for MapTiler, Mapbox, and Google Maps are handled via environment variables (e.g.,
REMOTION_MAPTILER_KEY,REMOTION_MAPBOX_TOKEN) rather than being hardcoded in the source files. - [SAFE]: The local utility scripts (
prep-cesium-path.mjs,prep-geo.mjs) are designed for offline processing of geographic data (GeoJSON) and do not contain any unsafe command execution or networking logic. - [SAFE]: No evidence of prompt injection, data exfiltration, or code obfuscation was detected across the 29 files provided.
Audit Metadata