Mapbox Style Patterns
v1.0.0Common style patterns, layer configurations, and recipes for typical mapping scenarios including restaurant finders, real estate, data visualization, navigat...
⭐ 0· 41·0 current·0 all-time
by@mapbox
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (Mapbox style patterns) matches the contents: style JSON snippets, layer patterns, and implementation notes for POI, real-estate, data-viz, navigation, and delivery maps. No unrelated credentials, binaries, or platform access are requested.
Instruction Scope
SKILL.md and reference files instruct the agent/developer to run browser-side Mapbox GL JS patterns (map.addLayer, map.setPaintProperty, requestAnimationFrame). These instructions are narrowly scoped to styling and client-side animation. As a note: several examples assume a browser/Mapbox environment (e.g., map.loadImage('path/to/arrow-icon.png'), requestAnimationFrame loops) — they are not directives to read system files or fetch secrets, but when applied by a developer they will cause network fetches for images if given remote URLs.
Install Mechanism
Instruction-only skill with no install spec and no code execution or downloads declared. Nothing is written to disk by the skill itself; lowest-risk install mechanism.
Credentials
requires.env is empty and no primary credential or config paths are requested. The examples assume you will provide your own Mapbox token in your application — the skill does not request or handle credentials itself.
Persistence & Privilege
always is false and disable-model-invocation is default (agent may call the skill autonomously), which is normal. The skill does not request persistent or elevated system privileges or modify other skills' configs.
Assessment
This skill is a coherent library of Mapbox style patterns and appears safe to install: it requests no secrets and has no install step. Before using: (1) ensure you supply and manage your own Mapbox access token securely (the skill does not provide or request one); (2) when following examples that load images (map.loadImage), avoid loading assets from untrusted remote URLs — use your own hosted assets or vetted CDNs; (3) the pulsing animation examples use requestAnimationFrame and map.setPaintProperty in the client (browser) — they are CPU/animation operations for the app and not server-side code; (4) standard caution: review any code you copy into production for performance and input validation. Overall the skill is internally consistent with its stated purpose.Like a lobster shell, security has layers — review code before you run it.
latestvk97fmfthxpszafgkw50shvx5qn83zwm0
License
MIT-0
Free to use, modify, and redistribute. No attribution required.