geomaster
Pass
Audited by Gen Agent Trust Hub on May 29, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to install a wide variety of standard geospatial and machine learning libraries using well-known package managers (conda, pip, uv). These include GDAL, Rasterio, GeoPandas, PyTorch, and SciKit-Learn.- [COMMAND_EXECUTION]: Documentation provides examples for integrating with external GIS software such as SAGA GIS via the Python
subprocessmodule. These examples are standard for geospatial workflows and use variable interpolation for CLI arguments.- [DATA_EXFILTRATION]: The skill references numerous official satellite data repositories and cloud platforms (ESA SciHub, USGS EarthExplorer, Microsoft Planetary Computer). All API interactions and cloud storage access examples use clearly marked placeholders for credentials and sensitive configuration.- [REMOTE_CODE_EXECUTION]: No patterns of unverified remote code execution (e.g., piped curl-to-shell) were detected. The skill primarily focuses on data processing workflows within established libraries.- [INDIRECT_PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection as it is designed to ingest and process external geospatial data formats (GeoJSON, Shapefiles) and API responses. This is a characteristic of the domain, and the documentation includes best practices for data validation.
Audit Metadata