qgis

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

NoteHigh Confidence

ASI02: Tool Misuse and Exploitation

What this means

The agent can process local geospatial files and create derived outputs; incorrect paths, CRS choices, or overwrite requests could affect the user's data workflow.

Why it was flagged

The skill instructs the agent to run local QGIS processing commands that read input files and create output files. This is central to the skill's purpose and is paired with safety guidance, but users should still verify paths and parameters.

Skill content

qgis_process run <algorithm-id> -- \
  INPUT=<input-path> \
  OUTPUT=<output-path>

Recommendation

Confirm input files, output locations, CRS, and overwrite behavior before running commands, especially for batch jobs.