cli-anything-samgeo
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
data download-tilescommand allows for the retrieval of geospatial raster data from remote map providers, which is a standard feature for satellite imagery processing. - [COMMAND_EXECUTION]: The skill implements a comprehensive CLI interface (
cli-anything-samgeo) to orchestrate complex image processing workflows, including project management and model execution. - [PROMPT_INJECTION]: The skill processes external data (satellite imagery) and accepts user-defined text prompts for segmentation (e.g.,
segment text -t "buildings"). While this represents a surface for indirect prompt injection where a maliciously crafted image or prompt could attempt to influence the model's output, the risk is localized to the segmentation results and does not grant broader system access. - Ingestion points: Imagery downloaded via
data download-tilesand text prompts provided to thesegment textcommand. - Boundary markers: None explicitly defined in the CLI instructions.
- Capability inventory: File system writes (exports, projects, masks) and subprocess management for the CLI harness.
- Sanitization: Input validation and data sanitization are handled by the underlying
segment-geospatialandsegment-anythinglibraries.
Audit Metadata