gdal
Pass
Audited by Gen Agent Trust Hub on Mar 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTIONDATA_EXFILTRATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Provides installation procedures for GDAL using official package managers and repositories, including Homebrew, Conda-forge, PyPI, and standard Linux package registries.
- [COMMAND_EXECUTION]: Includes extensive documentation and examples for using shell commands and script snippets to perform geospatial operations like format conversion, coordinate re-projection, and raster calculations.
- [PROMPT_INJECTION]: Identifies that the documented tools read metadata from external geospatial files. This constitutes a surface for indirect prompt injection if the agent interprets instructions embedded in the metadata of untrusted files.
- [DATA_EXFILTRATION]: Describes methods for accessing remote datasets through cloud storage and database connections. It correctly advises the use of environment variables for managing credentials and does not contain hardcoded secrets.
Audit Metadata