Mapbox Token Security

Security best practices for Mapbox access tokens, including scope management, URL restrictions, rotation strategies, and protecting sensitive data. Use when...

This is documentation-level guidance about Mapbox token security that appears legitimate, but review and reconcile the conflicting instructions before using operationally: 1) Update incident-response steps to prefer 'create replacement and deploy/verify before revoking' when zero-downtime is required; reserve immediate revocation only for extreme emergency when compromise is certain and downtime acceptable. 2) Clarify 'log token usage' to ensure only usage metrics are logged (not token values). 3) Test rotation and emergency procedures in staging to validate they behave as expected. 4) Note the source is unknown—treat this as general guidance, and cross-check against Mapbox's official docs and your org's incident response policy before enacting. If you intend to automate any of these steps, have a clear playbook that specifies when to revoke immediately vs. rotate safely to avoid accidental outages.

Type: OpenClaw Skill Name: mapbox-token-security Version: 1.0.0 The skill bundle is a purely educational resource providing security best practices for managing Mapbox access tokens. It contains detailed documentation, checklists, and incident response procedures (SKILL.md, AGENTS.md, and reference files) designed to help users implement the principle of least privilege and secure token storage. No malicious code, data exfiltration attempts, or harmful instructions were identified.