geospatial-analysis
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes external geospatial data (vector and raster files), creating a surface for indirect prompt injection where malicious instructions could be embedded in data files.
- Ingestion points:
SKILL.mdcontains Python functions usinggpd.read_fileandrasterio.opento process external files. - Boundary markers: No delimiters or instructions to ignore embedded content are provided.
- Capability inventory: The skill includes file system write capabilities via
fig.savefigin thepublication_mapfunction. - Sanitization: No sanitization or content validation for incoming geospatial data is implemented in the provided scripts.
Audit Metadata