open-map-stack
Pass
Audited by Gen Agent Trust Hub on Oct 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Several scripts in the examples folder utilize
subprocess.run()to orchestrate external GIS and build tools. examples/established-stack/analysis.pyexecutesdbtto build SQL models.examples/established-stack/delivery.pyexecutesnpm ciandnpm run buildto compile Observable Framework views, andopenmapstack.integrations.qgisfor desktop project generation.examples/tartu-development/routing.pyinvokesvalhalla_build_tilesto generate routing graphs.examples/tartu-development/qgis_delivery.pyusesdocker runto execute PyQGIS headlessly.- These executions are integral to the GIS workflow and operate on project-local resources.
- [EXTERNAL_DOWNLOADS]: The skill's examples and instructions involve downloading GIS data and software dependencies from well-known and trusted sources.
- Fetches data from official Estonian registries (Maa- ja Ruumiamet S3, ETAK WFS) and Tartu City Government GIS.
- Downloads OSM snapshots from Geofabrik (
download.geofabrik.de). - Uses standard package registries (NPM via
unpkg.comand PyPI). - References the Protomaps basemap service provided by the vendor (
goplex.ee). - [DYNAMIC_EXECUTION]: The toolkit uses templating engines to generate code and data views.
examples/established-stack/analysis.pyusesJinja2to render SQL model files.examples/tartu-development/dashboard-template.htmluses string replacement to embed derived data into the final dashboard.- [INDIRECT_PROMPT_INJECTION]: The skill defines a surface for processing untrusted external data (GeoJSON, CSV, OSM PBF).
- Ingestion points are clearly defined in the
pipeline.pytemplates and examples (e.g.,read_parquet,ST_Read). - The instructions emphasize validation, schema checks, and the use of structured data (JSON) to mitigate risks associated with processing external content.
Audit Metadata