geopandas

Pass

Audited by Gen Agent Trust Hub on May 29, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions to install several standard and well-known Python packages from the official PyPI registry using uv pip. These include geopandas, folium, mapclassify, pyarrow, psycopg2, geoalchemy2, contextily, and cartopy. All are established libraries for geospatial analysis and visualization.
  • [COMMAND_EXECUTION]: The documentation includes code snippets for reading from and writing to various file formats and databases (PostGIS). These operations use standard library functions like gpd.read_file() and gpd.to_file(). Database connection strings in the examples use clearly marked placeholders (e.g., postgresql://user:password@host:port/database) rather than hardcoded credentials.
  • [DATA_EXFILTRATION]: While the skill demonstrates how to read data from remote URLs and cloud storage (S3, Azure), these are standard capabilities for geospatial tasks. No instructions were found that attempt to exfiltrate sensitive system data or credentials to unauthorized external domains.
Audit Metadata
Risk Level
SAFE
Analyzed
May 29, 2026, 12:58 AM
Security Audit — agent-trust-hub — geopandas