gnnwr-spatial-analysis
Pass
Audited by Gen Agent Trust Hub on Jun 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends installing several external dependencies to function correctly.
- Python Dependencies: Instructs the user to run
pip install gnnwrfor the core library, and optionallygeopandas,contextily,folium, andmatplotlibfor visualization tasks. - Node.js Tooling: The README recommends using
npx skills add SteadfastAsArt/gnnwr-agent-skillfor installation. This command downloads and executes theskillspackage from the npm registry. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection due to its core functionality of processing external data files.
- Ingestion points: The skill instructions involve reading user-provided data via
pd.read_csv("data.csv")inSKILL.mdandAGENTS.md. - Boundary markers: No specific boundary markers or "ignore instructions" warnings are provided to the agent for the data ingestion step.
- Capability inventory: The skill utilizes the
gnnwrlibrary for regression modeling and various visualization tools (matplotlib,folium,geopandas) to generate maps and reports. No high-risk capabilities such as arbitrary subprocess execution or network-based exfiltration were identified in the provided scripts. - Sanitization: The instructions do not include data validation or sanitization steps before the data is processed by the model.
Audit Metadata