landscape-connectivity
Pass
Audited by Gen Agent Trust Hub on Jun 26, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes R's
system()function to execute the Python-based connectivity analysis script and external scientific CLI tools like Circuitscape. These system calls useshQuoteto wrap arguments, which is an appropriate security measure for scientific pipelines to prevent command injection. - [SAFE]: The skill processes untrusted spatial data (GeoTIFF, Shapefiles) and CSV files. Potential indirect injection risks are mitigated by the scripts' design, which converts external data into strictly typed numerical representations (floating-point coordinates and areas) before performing graph calculations.
- [SAFE]: The skill relies on well-known, established scientific libraries such as
networkx,igraph,terra, andsf. No unverified remote code execution, obfuscation, or data exfiltration patterns were detected across the analyzed files.
Audit Metadata