Skip to content
FREnglish version : EN
Install

portaljs-add-geo

datopian/portaljs / skills/portaljs-add-geo

turns a geo file into a map and spatial queries , which improves: ready-to-use serverless portal

score 9/10high risk2.4K repo stars

Details

judge’s score
9/10
publisher
datopian
status
new
skill’s last commit
Jul 8, 2026
repo stars
2,368
main type
Data

Judgement

Precise, verifiable geo pipeline (ogr2ogr, tippecanoe, duckdb commands; RFC7946 and Hilbert pitfalls; size thresholds). Removed: external main workflow not provided, truncated annex, pipeline that publishes data.

reservations

  • The step-by-step real workflow is in .claude/commands/portaljs-add-geo.md, hosted elsewhere and not provided: the assessment covers only SKILL.md and the reference.
  • The annex references/reference.md is truncated (5000 characters out of 5023) and the Design rationale section is cut off.
  • No pinned version of the external workflow and no integrity check on the native tools installed.
sub-scores
Triggering
2/2
Added value
2/2
Precision
2/2
Scope
2/2
Quality
1/2

Alerts

4 alerts, by category

Network

  • high risk

    SKILL.md asks to read and follow a remote file on GitHub (main branch, not pinned): a change to that file changes the instructions executed, without review.

  • high risk

    The pipeline sends the user's data to a third party (Cloudflare R2 via Arc, data.portaljs.com) and makes it public via URL, with no privacy warning.

  • high risk

    A source URL provided by the user is downloaded (curl or WebFetch) then processed by ogr2ogr and duckdb: untrusted input on native parsers.

Static scan

  • info risk

    allowed-tools frontmatter

    Read, Write, Edit, Bash(ogr2ogr:*), Bash(ogrinfo:*), Bash(tippecanoe:*), Bash(du

Original description

Auto-ingest a geospatial file (GeoJSON, Shapefile, GeoPackage, KML/KMZ, FlatGeobuf, CSV-with-geometry) into a PortalJS portal on the user's own machine, with no server. Normalizes CRS to EPSG:4326, derives a PMTiles render tier and a GeoParquet query tier, pushes all three artifacts to Cloudflare R2…

added on Oct 19, 2026 · license MIT