geo-fundamentals

Warn

Audited by Gen Agent Trust Hub on Feb 16, 2026

Risk Level: MEDIUMCOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION] (MEDIUM): The skill documentation includes a 'Script' section that instructs the agent to execute python scripts/geo_checker.py <project_path>. The source code for this script is missing from the package, making it impossible to verify its safety. Executing unknown scripts on a local machine can lead to unauthorized system access or data loss.
  • [DATA_EXPOSURE] (LOW): The skill is configured with tools (Read, Glob, Grep) designed to scan local directories. While legitimate for a 'checker' utility, these capabilities combined with an unverified script create an attack surface where sensitive local files could be accessed without the user's knowledge.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 16, 2026, 01:06 PM