geopandas

Pass

Audited by Gen Agent Trust Hub on Jun 14, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides educational content and code snippets for using the GeoPandas library. All mentioned dependencies (geopandas, folium, mapclassify, pyarrow, etc.) are well-known, legitimate packages in the Python data science ecosystem.
  • [DATA_EXPOSURE]: While the skill includes instructions for reading from external URLs and databases, these are standard functionalities of a geospatial library. The provided database connection string uses generic placeholders for demonstration purposes and does not expose real credentials.
  • [INDIRECT_PROMPT_INJECTION]: The skill demonstrates functions like read_file that ingest data from external sources (GeoJSON, files, URLs). While this technically constitutes a surface for indirect prompt injection if an agent processes untrusted geographic data, this is inherent to the library's primary purpose and no exploitable instructions were found.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 14, 2026, 09:22 AM
Security Audit — agent-trust-hub — geopandas