Security audit
Security checks across malware telemetry and agentic risk
This skill does not look intentionally harmful, but it can generate earthquake damage reports from synthetic data even when real inputs or downloads are supplied, so it needs review before use.
Treat this as a demo/prototype unless the publisher fixes real input processing. Do not use its outputs for disaster response, safety decisions, engineering assessment, administrative determinations, or compensation workflows without independent human verification. Before installing for serious use, require clear permissions, pinned dependencies, explicit synthetic-output labeling, and fail-closed behavior when real imagery is supplied but cannot be processed.
"""Validate file existence and numeric ranges.
Returns exit code (0 = ok, 2 = arg error)."""
for flag, accessor in FILE_ARGS.items():
path = eval(accessor) # noqa: S307 - safe: only string concat
if path is not None and not Path(path).exists():
print(f"ERROR: --{flag} not found: {path}", file=sys.stderr)
return 2geoskill-data-fetcher>=0.2.0 # Third-party dependencies used by this skill numpy scipy
# Third-party dependencies used by this skill numpy scipy
# Requirements for earthquake-damage-assessment # Shared data-download library (Planetary Computer / NASA POWER / OSM) geoskill-data-fetcher>=0.2.0 # Third-party dependencies used by this skill numpy
VirusTotal findings are pending for this skill version.
Detected: suspicious.dynamic_code_execution