qgis-impl-web-services
Pass
Audited by Gen Agent Trust Hub on Jun 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides comprehensive guidance on the secure implementation of OGC web services (WMS, WFS, WMTS, WCS) and QGIS Server components using the PyQGIS API. It emphasizes defensive programming practices, such as validating layer integrity immediately after construction.
- [SAFE]: It contains explicit warnings against security risks, such as hardcoding credentials in URI strings. It provides correct patterns for using the
QgsAuthManagersystem to handle authentication configurations securely. - [SAFE]: The provided code examples for QGIS Server filters include robust implementations of access control (
QgsAccessControlFilter), demonstrating how to programmatically restrict access to sensitive layers, features, and attributes. - [SAFE]: All external references and documentation links point to official QGIS documentation and well-known repositories. No suspicious remote code execution or unauthorized data exfiltration patterns were detected.
Audit Metadata