geopandas
Pass
Audited by Gen Agent Trust Hub on Apr 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides installation commands for the
geopandaslibrary and its standard ecosystem dependencies likefolium,pyarrow, andpsycopg2. These are widely used and trusted packages in the Python community. - [COMMAND_EXECUTION]: Examples include executing SQL queries via PostGIS database connections, which is a standard and intended feature for geospatial data science workflows.
- [DATA_EXFILTRATION]: Documentation covers legitimate data loading patterns from remote URLs and cloud storage platforms such as Amazon S3 and Azure Blob Storage. These are standard operations for accessing distributed spatial datasets.
- [PROMPT_INJECTION]: The skill documents how to process data from external files and databases, which represents an inherent surface for indirect prompt injection. Ingestion points:
read_file,read_postgis, andread_parquet. Boundary markers: None present in the documentation examples. Capability inventory: SQL execution, file system writes, and network access. Sanitization: Not explicitly documented in the library usage examples.
Audit Metadata