mapbox-token-security 是做什么的?
适用于Mapbox访问令牌的安全最佳实践,包括作用域管理、URL限制、轮换策略及敏感数据保护。在创建、管理或提供有关Mapbox令牌安全的建议时使用。
安全最佳实践指南,涵盖Mapbox访问令牌的作用域管理、URL限制、轮换策略及敏感数据保护。适用于创建、管理或提供Mapbox令牌安全建议时使用。
该技能提供了一套全面的Mapbox访问令牌安全最佳实践,适用于Claude Code、Cursor等AI编码助手。它详细指导如何通过作用域管理(如限制为`SKU:tiles`、`SKU:styles`)、URL白名单设置、Referer来源验证及定期轮换令牌来降低泄露风险。同时涵盖如何保护令牌不被提交到代码仓库、在客户端安全使用令牌(如使用环境变量`MAPBOX_ACCESS_TOKEN`)、以及监控使用情况。支持所有Mapbox平台,包括JavaScript SDK、Android SDK、iOS SDK、REST API及GL JS等。该技能强调最小权限原则和自动撤销未使用令牌,帮助开发者构建更安全的Web和移动地图应用。
npx skills add https://github.com/mapbox/mapbox-agent-skills/tree/main/skills/mapbox-token-securityInstalled? Explore more 生产力与协作 skills: steipete/gemini, steipete/gh-issues, steipete/skill-creator · View all 6 →
适用于Mapbox访问令牌的安全最佳实践,包括作用域管理、URL限制、轮换策略及敏感数据保护。在创建、管理或提供有关Mapbox令牌安全的建议时使用。
This repo contains 8 individual skills — each has its own dedicated page.
Expert guidance on map design principles, color theory, visual hierarchy, typography, and cartographic best practices for creating effective and beautiful maps with Mapbox. Use when designing map styles, choosing colors, or making cartographic decisions.
Patterns for visualizing data on maps including choropleth maps, heat maps, 3D visualizations, data-driven styling, and animated data. Covers layer types, color scales, and performance optimization.
Expert guidance on choosing the right geospatial tool based on problem type, accuracy requirements, and performance needs
Complete workflow for implementing Mapbox search in applications - from discovery questions to production-ready integration with best practices
Common style patterns, layer configurations, and recipes for typical mapping scenarios including restaurant finders, real estate, data visualization, navigation, delivery/logistics, and more. Use when implementing specific map use cases or looking for proven style patterns.
Expert guidance on validating, optimizing, and ensuring quality of Mapbox styles through validation, accessibility checks, and optimization. Use when preparing styles for production, debugging issues, or ensuring map quality standards.
Official integration patterns for Mapbox GL JS across popular web frameworks (React, Vue, Svelte, Angular). Covers setup, lifecycle management, token handling, search integration, and common pitfalls. Based on Mapbox's create-web-app scaffolding tool.
Performance optimization patterns for Mapbox GL JS web applications. Covers initialization waterfalls, bundle size, rendering performance, memory management, and web optimization. Prioritized by impact on user experience.
Gemini CLI one-shot prompts, summaries, generation, skills, hooks, MCP, or Gemma routing.
Fetch GitHub issues, select candidates, spawn background fix agents, open PRs, and optionally process PR review comments.
Create, edit, audit, tidy, validate, or restructure AgentSkills and SKILL.md files.
Search, install, update, sync, or publish agent skills with the ClawHub CLI and registry.
Delegate coding work to Codex, Claude Code, or OpenCode as background workers; not simple edits or read-only code lookup.
List, configure, authenticate, call, and inspect MCP servers/tools with mcporter over HTTP or stdio.