Security audit

Geoskill: Geocoding Skill

Security checks across malware telemetry and agentic risk

Overview

This geocoding skill sends user-provided locations to documented geocoding services and writes local result files, with documentation caveats but no hidden or destructive behavior found.

Install only if you are comfortable sending the addresses, place names, or coordinates you provide to Nominatim/Open-Meteo or to any endpoint you configure externally. Avoid using it for confidential customer, home, or sensitive location datasets unless you have approval and understand the providers' logging/privacy terms. Expect some documentation rough edges, especially around language, resume, endpoint, and timeout options.

SkillSpector

By NVIDIA

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands

Findings (8)

Description-Behavior Mismatch

Low

Confidence: 90% confidence
Finding: The module docstring and main CLI description present the tool as a forward and reverse geocoding utility. However, the code also exposes additional subcommands for deriving bounding boxes and trying multiple providers automatically, which expands behavior beyond the stated top-level description.

Intent-Code Divergence

Low

Confidence: 94% confidence
Finding: The inline comment states that a fallback chain is used when the primary endpoint is rate-limited or unreachable, implying multiple alternative endpoints. In practice, the list contains only a single Nominatim endpoint, so the documented resilience behavior is not actually implemented.

Intent-Code Divergence

Low

Confidence: 88% confidence
Finding: The cmd_bbox docstring describes the command as forward geocoding a place and returning its bbox, which suggests a provider-sourced boundary. The implementation instead invents an approximate square around the centroid when no bbox is available, which materially differs from a true returned bounding box.

Missing User Warnings

Medium

Confidence: 94% confidence
Finding: This markdown file documents use of Nominatim and Open-Meteo as remote data sources and describes batch processing of user-supplied addresses, but it does not include a user-facing warning that those queries are transmitted to third-party services. Because geocoding inputs can contain sensitive location or address data, the omission is a meaningful privacy disclosure gap under the missing-warning rule for markdown files.

Natural-Language Policy Violations

Medium

Confidence: 98% confidence
Finding: The Nominatim request hard-codes the Accept-Language header to "zh-CN,zh;q=0.9", which biases results toward Chinese regardless of the user's preferences. This is a natural-language locale policy issue because the code enforces a specific language without offering a choice or explaining a region-specific requirement.

Scope Creep

Low

Category: Excessive Agency
Content: copies or substantial portions of the Software. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
Confidence: 70% confidence
Finding: NOT LIMITED TO

Unpinned Dependencies

Low

Category: Supply Chain
Content: requests>=2.28.0
Confidence: 50% confidence
Finding: requests>=2.28.0

Known Vulnerable Dependency: requests==2.28.0 — 8 advisory(ies): CVE-2024-47081 (Requests vulnerable to .netrc credentials leak via malicious URLs); CVE-2024-35195 (Requests `Session` object does not verify requests after making first request wi); CVE-2026-25645 (Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility func) +5 more

High

Category: Supply Chain
Confidence: 80% confidence
Finding: requests==2.28.0

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.