Savant verdict: Unsafe
SkillSpector recommends not installing this skill.
Live evaluation
Not evaluated yet. Workspaces can request a live evaluation.
Safety (NVIDIA SkillSpector)
Risk score
56/100
Recommendation
DO NOT INSTALL
Severity
HIGH
Savant decision
Blocked
SkillSpector recommends not installing this package. SkillSpector 2.12.0, static analysis.
16 patterns found
- Privilege Escalation: access tokenhigh · techniques/mapbox/TECHNIQUE.md:8 · Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
- Privilege Escalation: access tokenhigh · techniques/mapbox/TECHNIQUE.md:10 · Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
- Privilege Escalation: access tokenhigh · techniques/mapbox/TECHNIQUE.md:63 · Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
- MCP Least Privilege: Skill declares no tool scope ('permissions' or 'allowed-tools') but code capabilities were detected: env.medium · SKILL.md:1 · Without declared permissions the skill's intent is opaque and cannot be validated.
- Prompt Injection: U+0020 x105medium · techniques/cesium/references/3d-troubleshooting.md:30 · Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
- Prompt Injection: U+0020 x97medium · techniques/cesium/references/3d-troubleshooting.md:30 · Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
- Prompt Injection: U+0020 x97medium · techniques/cesium/references/3d-troubleshooting.md:36 · Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
- Prompt Injection: U+0020 x84medium · techniques/cesium/references/3d-troubleshooting.md:33 · Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
- Prompt Injection: U+0020 x84medium · techniques/cesium/references/3d-troubleshooting.md:37 · Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
- Prompt Injection: U+0020 x81medium · techniques/cesium/references/3d-troubleshooting.md:34 · Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
Structure
- Description is very shortA description that says when to use the skill helps agents route to it.
- Ships 5 executable scriptstechniques/cesium/assets/flight-path.ts, techniques/cesium/scripts/prep-cesium-path.mjs, techniques/maptiler/assets/MapTilerVectorElement.ts, techniques/maptiler/assets/tokens.ts, techniques/maptiler/scripts/prep-geo.mjs. Review what they do before enabling the skill for agents with tool access.
- No license declaredConfirm you may reuse this skill before importing it into your repository.
SKILL.md
--- name: remotion-maps description: Remotion Map animation knowledge version: 4.0.506 --- # Remotion Maps Choose exactly one technique from the intended shot, then load only that technique's `TECHNIQUE.md`. Every technique directory is self-contained and may be removed without breaking the others. ## [Static map](techniques/static-map/TECHNIQUE.md) - Requires you grab a satellite image and mount it in a `<Img>` tag, and animate on top ## [Mapbox](techniques/mapbox/TECHNIQUE.md) - Requires a Mapbox key - Nicer styles by default - Map can display a round globe when zoomed out - Includes nice 3D buildings such as the Eiffel tower ## [MapLibre](techniques/maplibre/TECHNIQUE.md) - Requires no API key, fully free - Does not include 3D building ## [MapTiler](techniques/maptiler/TECHNIQUE.md) - Uses MapTiler - Annotations can be drawn on top of geographic features: borders, rivers, labels ## [CesiumJS](techniques/cesium/TECHNIQUE.md) - Flythroughs through terrain and mountains - "Flight simulator" perspective