maps-geolocation
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches Leaflet's CSS and JS libraries from the official and well-known unpkg.com CDN (
unpkg.com/leaflet@1.9/dist/leaflet.js). This is standard practice for including the Leaflet mapping library. - [CREDENTIALS_UNSAFE]: The skill uses environment variable placeholders (
GOOGLE_MAPS_API_KEY,MAPBOX_ACCESS_TOKEN) and generic variable names (API_KEY) for authentication. No real secrets are exposed, and it correctly instructs users to export these values in their environment.
Audit Metadata