geopandas

Pass

Audited by Gen Agent Trust Hub on Apr 9, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides installation commands for the geopandas library and its standard ecosystem dependencies like folium, pyarrow, and psycopg2. These are widely used and trusted packages in the Python community.
  • [COMMAND_EXECUTION]: Examples include executing SQL queries via PostGIS database connections, which is a standard and intended feature for geospatial data science workflows.
  • [DATA_EXFILTRATION]: Documentation covers legitimate data loading patterns from remote URLs and cloud storage platforms such as Amazon S3 and Azure Blob Storage. These are standard operations for accessing distributed spatial datasets.
  • [PROMPT_INJECTION]: The skill documents how to process data from external files and databases, which represents an inherent surface for indirect prompt injection. Ingestion points: read_file, read_postgis, and read_parquet. Boundary markers: None present in the documentation examples. Capability inventory: SQL execution, file system writes, and network access. Sanitization: Not explicitly documented in the library usage examples.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 9, 2026, 10:12 PM