geopandas
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill provides legitimate documentation and usage examples for the GeoPandas library. All code samples, including geometric operations and spatial joins, are standard and safe library functionality.\n- [INDIRECT_PROMPT_INJECTION]: The skill documents functions for ingesting external data, which is a standard library feature but represents a theoretical attack surface for indirect prompt injection.\n
- Ingestion points:
gpd.read_file()andgpd.read_postgis()(found inSKILL.mdandreferences/data-io.md) allow importing geospatial data from various sources.\n - Boundary markers: No specific boundary markers or instructions to ignore embedded commands are included.\n
- Capability inventory: The documented capabilities include file writing (
to_file), network reading (read_file), and database interaction (to_postgis).\n - Sanitization: No explicit data sanitization techniques are provided beyond standard geometric validation.\n- [COMMAND_EXECUTION]: The skill documents standard
uv pip installcommands for library installation and mentions CLI tools likegit, which is expected behavior for documentation.
Audit Metadata