OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn5 providerslatest audit Sep 15, 2026
Independent checks from skills.sh's audit partners.
The skill provides development patterns for Mapbox-based location search applications. It is generally safe and uses well-known, trusted dependencies for mapping and spatial analysis. However, it demonstrates rendering location data directly into the user interface using `innerHTML` and `setHTML` without sanitization, which creates a potential surface for cross-site scripting (XSS) or indirect prompt injection if the source data contains malicious payloads.
Detected behaviors
No alerts
No issues
2/2 files flagged
Score: 93/100 · 2 sections analyzed