geobase-worker-srai-embeddings
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXFILTRATION]: The skill interacts with the geobase.app domain via HTTP GET and POST requests to manage worker jobs and check capacity. These operations use the GEOBASE_SERVICE_ROLE_KEY for authentication, which is standard behavior for this service.
- [CREDENTIALS_UNSAFE]: The skill implements safe secret management by instructing the user to store the GEOBASE_SERVICE_ROLE_KEY in a local .env.secrets file and explicitly warns against pasting keys in the chat.
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided inputs such as query strings and filter configurations for inclusion in API payloads. While this creates a potential data ingestion surface, the parameters are scoped to geospatial queries and handled as structured data.
Audit Metadata