reproducible-gis-project

Pass

Audited by Gen Agent Trust Hub on Sep 17, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The worked example pipeline (examples/tartu-development/pipeline.py) downloads authoritative cadastral and infrastructure data from official Estonian government and municipal services, including Maa- ja Ruumiamet (Land Board) S3 storage, the Environment Agency's WFS GeoServer, and Tartu City Government ArcGIS Feature Services.
  • [COMMAND_EXECUTION]: The pipeline script in the Tartu example includes functionality to spawn a QGIS Docker container via subprocess.run to compile desktop GIS projects. This execution is triggered only when the OPENMAPSTACK_USE_QGIS_DOCKER environment variable is set and uses hardcoded script logic to ensure reproducibility.
  • [DYNAMIC_EXECUTION]: The skill uses __import__ for the standard library json module in its pipeline template. In the worked example, it executes a hardcoded Python script string inside a containerized QGIS environment to ensure style-perfect desktop project generation.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 17, 2026, 10:08 AM
Security Audit — agent-trust-hub — reproducible-gis-project