geomaster

Pass

Audited by Gen Agent Trust Hub on Apr 9, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides integration logic for external GIS software like SAGA GIS using the Python subprocess module. These operations are restricted to executing specific command-line tools for spatial analysis within defined functions.- [EXTERNAL_DOWNLOADS]: Multiple examples demonstrate downloading environmental and satellite data from well-known and trusted providers, including the European Space Agency (ESA), Microsoft Planetary Computer, and Google Earth Engine. These represent standard workflows in Earth observation.- [CREDENTIALS_UNSAFE]: The documentation mentions authentication for various APIs but correctly uses placeholders (e.g., 'YOUR_API_KEY', 'user', 'password') instead of hardcoding sensitive credentials.- [DATA_EXFILTRATION]: No patterns of unauthorized data exfiltration were found. Network operations are dedicated to legitimate data retrieval from known geospatial repositories or cloud platform APIs.- [INDIRECT_PROMPT_INJECTION]: As a geospatial analysis tool, the skill is designed to ingest and process large volumes of untrusted external data (GeoJSON, GeoTIFF, Shapefiles). This inherent attack surface is managed through the use of standard, hardened libraries like GDAL and GeoPandas for parsing.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 9, 2026, 10:12 PM