opengis-utils-for-java

Pass

Audited by Gen Agent Trust Hub on Mar 27, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a technical reference guide for the OGU4J library, detailing its architecture, core data models, and API entry points for GIS tasks.
  • [SAFE]: Credential management for database connections is handled safely in the documentation, using redaction for passwords and recommending secure configuration practices like environment variables.
  • [SAFE]: The skill references legitimate, well-known GIS libraries (GeoTools, JTS, GDAL) and authoritative repositories (OSGeo) consistent with its primary purpose as a development tool.
  • [PROMPT_INJECTION]: The library's capability to process untrusted external data (e.g., Shapefiles, GeoJSON, PostGIS) presents a standard surface for indirect prompt injection.
  • Ingestion points: Data enters the system via OguLayerUtil.readLayer and GtTxtUtil.loadTxt from external files or databases.
  • Boundary markers: The documentation does not explicitly mention markers to delimit data or instructions to ignore embedded content within GIS attributes.
  • Capability inventory: The toolkit includes file system writes (OguLayerUtil.writeLayer) and network connectivity for database access.
  • Sanitization: No specific sanitization methods for data-derived strings are described in the provided technical overview.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 27, 2026, 08:54 AM
Security Audit — agent-trust-hub — opengis-utils-for-java