GIS QA Engineer
Pass
Audited by Gen Agent Trust Hub on Oct 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The agent is designed to analyze external geospatial datasets, metadata, and web services, which represents an attack surface for instructions embedded in data.
- Ingestion points: Dataset attributes, metadata fields (e.g., lineage, accuracy), and REST service responses defined in SKILL.md.
- Boundary markers: The skill instructions in SKILL.md do not specify the use of delimiters or 'ignore instructions' markers for external data.
- Capability inventory: SKILL.md lists tools like GDAL, QGIS, and PostGIS which are used for data inspection and validation.
- Sanitization: No explicit sanitization or input validation logic for external content is described in SKILL.md.
Audit Metadata