geopandas
Pass
Audited by Gen Agent Trust Hub on Jun 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: Comprehensive analysis of the skill instructions and reference files reveals no malicious behavior. The skill provides legitimate guidance for using the GeoPandas library.
- [COMMAND_EXECUTION]: The skill provides instructions for installing standard, well-known Python packages including geopandas, folium, pyarrow, and cartopy using the uv package manager.
- [EXTERNAL_DOWNLOADS]: Reference documentation (references/data-io.md) correctly describes the library built-in capability to read geospatial data from remote URLs, S3 buckets, and Azure Blob Storage.
- [PROMPT_INJECTION]: The skill handles external data files which presents an indirect prompt injection surface. 1. Ingestion points: Data is ingested through gpd.read_file() and gpd.read_postgis() from various file formats and databases. 2. Boundary markers: The provided code examples do not demonstrate the use of delimiters or specific instructions to ignore data-embedded commands. 3. Capability inventory: The skill includes file writing, network requests for remote data, and database interaction. 4. Sanitization: No explicit data sanitization of geometry attributes or metadata is demonstrated in the examples.
Audit Metadata