geomaster
Pass
Audited by Gen Agent Trust Hub on Mar 7, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for installing a large number of scientific libraries and software packages from trusted and well-known ecosystems, including Conda-forge, PyPI (via pip/uv), and NPM. It also references official downloads from reputable organizations such as the European Space Agency (ESA) for the SNAP software.
- [COMMAND_EXECUTION]: The documentation includes code examples in the 'gis-software.md' file that demonstrate the use of the Python 'subprocess' module to interface with SAGA GIS command-line tools. While subprocess execution is a powerful capability, in this context it is presented as a standard method for scientific software integration.
- [DATA_EXPOSURE]: The reference files (e.g., 'data-sources.md') illustrate the use of various geospatial APIs like Google Maps, Mapbox, and OpenWeatherMap. These examples correctly use placeholders such as 'YOUR_API_KEY' or 'YOUR_ACCESS_TOKEN' rather than exposing actual credentials.
- [SAFE_PRACTICES]: The skill emphasizes best practices for geospatial data handling, including coordinate reference system (CRS) validation, geometric integrity checks, and privacy-preserving techniques like differential privacy and k-anonymity for trajectory data.
Audit Metadata