geomaster

Pass

Audited by Gen Agent Trust Hub on Jun 13, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill serves as a legitimate reference for geospatial programming, providing educational code snippets and documentation for well-known scientific libraries. No obfuscation, persistence, or data exfiltration techniques were detected.
  • [COMMAND_EXECUTION]: The skill includes examples for calling the SAGA GIS command-line tool via Python's subprocess module, which is a standard requirement for integrating specific scientific software into automated workflows.
  • [EXTERNAL_DOWNLOADS]: The documentation provides instructions for accessing and downloading datasets from reputable and official sources, including Microsoft Planetary Computer, AWS S3 buckets for Natural Earth data, and ESA's Copernicus data hub.
  • [PROMPT_INJECTION]: The skill identifies a surface for processing external datasets that could theoretically contain indirect prompt injection instructions.
  • Ingestion points: Uses GeoPandas and Rasterio to load external vector and raster files from disk and remote APIs.
  • Boundary markers: The provided code examples do not demonstrate the use of delimiters to isolate untrusted data.
  • Capability inventory: The skill's documented environment includes capabilities for CLI execution, network requests, and local file system modifications.
  • Sanitization: As a general reference, the code snippets do not incorporate explicit input sanitization or verification for ingested geospatial data formats.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 13, 2026, 06:23 AM