cli-anything-samgeo

Pass

Audited by Gen Agent Trust Hub on Jul 30, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The data download-tiles command allows for the retrieval of geospatial raster data from remote map providers, which is a standard feature for satellite imagery processing.
  • [COMMAND_EXECUTION]: The skill implements a comprehensive CLI interface (cli-anything-samgeo) to orchestrate complex image processing workflows, including project management and model execution.
  • [PROMPT_INJECTION]: The skill processes external data (satellite imagery) and accepts user-defined text prompts for segmentation (e.g., segment text -t "buildings"). While this represents a surface for indirect prompt injection where a maliciously crafted image or prompt could attempt to influence the model's output, the risk is localized to the segmentation results and does not grant broader system access.
  • Ingestion points: Imagery downloaded via data download-tiles and text prompts provided to the segment text command.
  • Boundary markers: None explicitly defined in the CLI instructions.
  • Capability inventory: File system writes (exports, projects, masks) and subprocess management for the CLI harness.
  • Sanitization: Input validation and data sanitization are handled by the underlying segment-geospatial and segment-anything libraries.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 30, 2026, 11:18 PM
Security Audit — agent-trust-hub — cli-anything-samgeo