portolan-cli
Pass
Audited by Gen Agent Trust Hub on Aug 6, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Recommends the installation of the
portolan-clipackage from the official Python package index using standard tools likepip,pipx, oruv. - [COMMAND_EXECUTION]: Utilizes CLI commands to perform operations on geospatial catalogs, including directory scanning, metadata validation, and README generation.
- [DATA_EXFILTRATION]: Synchronizes geospatial data between local catalogs and cloud storage services including Amazon S3, Google Cloud Storage, and Microsoft Azure.
- [PROMPT_INJECTION]: Identifies a potential surface for indirect prompt injection due to data ingestion from external sources.
- Ingestion points: Remote geospatial metadata and datasets are fetched via
portolan pull,portolan clone, andportolan extract(SKILL.md). - Boundary markers: None identified within the provided instruction set.
- Capability inventory: The skill includes file system write operations and network connectivity for cloud storage synchronization (SKILL.md).
- Sanitization: No metadata sanitization or validation logic is explicitly described in the documentation.
Audit Metadata