Security audit
Security checks across malware telemetry and agentic risk
The skill is mostly a drone-survey QC tool, but it can download public satellite imagery and treat it as an orthomosaic without strong provenance labeling, which could mislead users about what was actually checked.
Install only if you are comfortable with an optional network-enabled mode that may contact Microsoft Planetary Computer using the area/date you provide and cache/download imagery locally. For actual UAV deliverable acceptance, prefer supplying explicit local orthomosaic/DSM/control-point files, and treat bbox/date remote results as reference imagery rather than proof that the drone deliverables passed QC.
"""Validate file existence and numeric ranges.
Returns exit code (0 = ok, 2 = arg error)."""
for flag, accessor in FILE_ARGS.items():
path = eval(accessor) # safe: only string concat
if path is not None and not Path(str(path)).exists():
print(f"ERROR: --{flag.replace('_', '-')} not found: {path}", file=sys.stderr)
return 2geoskill-data-fetcher>=0.2.0 # Third-party dependencies used by this skill numpy rasterio
# Third-party dependencies used by this skill numpy rasterio
# Requirements for drone-survey-qc # Shared data-download library (Planetary Computer / NASA POWER / OSM) geoskill-data-fetcher>=0.2.0 # Third-party dependencies used by this skill numpy
65/65 vendors flagged this skill as clean.
Detected: suspicious.dynamic_code_execution