Security audit

Geoskill: Climate Risk Screening

Security checks across malware telemetry and agentic risk

Overview

This skill is a climate-risk reporting tool whose file processing, NASA POWER download mode, and report outputs match its stated purpose, with some privacy and dependency-management caveats.

Install only if you are comfortable with the skill making NASA POWER requests when you use bbox/date-range download mode and caching downloaded data locally. For stricter environments, prefer supplying local rasters, set an explicit cache/output directory, and pin or review dependencies before installation.

SkillSpector

By NVIDIA

Vulnerability Patterns

Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access

Findings (5)

Vague Triggers

Medium

Confidence: 89% confidence
Finding: The skill description is broad enough that an agent could invoke it for generic 'analyze changes' or 'generate assessment reports' requests that are not clearly about climate-risk screening. Over-broad activation criteria can cause unintended tool use, including processing user data or triggering downstream actions when the user did not specifically request this skill.

Missing User Warnings

Medium

Confidence: 94% confidence
Finding: The documentation states that the skill can automatically download NASA POWER data 'without an API key' when given only a bounding box and date range, but it does not require explicit user confirmation for network access. In an agent setting, undocumented or non-consensual outbound requests can leak user intent, coordinates, and timing metadata, and may violate expected sandboxing or privacy boundaries.

Unpinned Dependencies

Low

Category: Supply Chain
Content: geoskill-data-fetcher>=0.2.0 # Third-party dependencies used by this skill numpy rasterio
Confidence: 94% confidence
Finding: numpy

Unpinned Dependencies

Low

Category: Supply Chain
Content: # Third-party dependencies used by this skill numpy rasterio
Confidence: 94% confidence
Finding: rasterio

Unpinned Dependencies

Low

Category: Supply Chain
Content: # Requirements for climate-risk-screening # Shared data-download library (Planetary Computer / NASA POWER / OSM) geoskill-data-fetcher>=0.2.0 # Third-party dependencies used by this skill numpy
Confidence: 97% confidence
Finding: geoskill-data-fetcher>=0.2.0

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

Detected: suspicious.dynamic_code_execution

Dynamic code execution detected.

Critical

Code: suspicious.dynamic_code_execution
Location: scripts/climate_risk_screening.py:270