writing-tilebox-workflows
Warn
Audited by Gen Agent Trust Hub on Jun 25, 2026
Risk Level: MEDIUMREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill provides implementation examples using
pickle.loads()to retrieve data fromcontext.job_cache. Aspickleis inherently unsafe for deserialization, this pattern introduces a risk of arbitrary code execution if the cache content is manipulated or contains untrusted data. - [EXTERNAL_DOWNLOADS]: The documentation guides users to manage dependencies using
uv syncandpyproject.tomlfor various well-known geospatial and machine learning libraries, includingrasterio,zarr,xarray,odc-geo, andtorch. - [DATA_EXFILTRATION]: The skill describes procedures for interfacing with established cloud storage services (Amazon S3, Google Cloud Storage, and Azure Blob Storage) using the
obstorelibrary for high-throughput geospatial data operations. - [PROMPT_INJECTION]: The skill provides patterns for processing external geospatial datasets which introduces a surface for indirect prompt injection. 1. Ingestion points:
dataset.queryandGeoTIFF.openoperations. 2. Boundary markers: Not present in the instructional patterns. 3. Capability inventory: Shell command execution viauvand network operations vianiquestsandobstore. 4. Sanitization: No explicit data validation or sanitization steps are included in the provided workflow patterns.
Audit Metadata