Security audit
Security checks across malware telemetry and agentic risk
The skill is not clearly malicious, but it can generate operational-looking algal bloom reports from synthetic data even when a user expects local or downloaded imagery to be analyzed.
Use this skill only for demonstrations or exploratory workflow checks unless you first verify that real imagery is actually ingested and labeled in the outputs. Do not rely on its reports for environmental, safety, regulatory, or operational decisions as-is. Review network use before providing sensitive AOI/date parameters, and prefer pinned dependencies for reproducible installs.
"""Validate file existence and numeric ranges.
Returns exit code (0 = ok, 2 = arg error)."""
for flag, accessor in FILE_ARGS.items():
path = eval(accessor) # noqa: S307 - safe: only string concat
if path is not None and not Path(path).exists():
print(f"ERROR: --{flag} not found: {path}", file=sys.stderr)
return 2geoskill-data-fetcher>=0.2.0 # Third-party dependencies used by this skill numpy
# Requirements for harmful-algal-bloom-monitor # Shared data-download library (Planetary Computer / NASA POWER / OSM) geoskill-data-fetcher>=0.2.0 # Third-party dependencies used by this skill numpy
VirusTotal findings are pending for this skill version.
Detected: suspicious.dynamic_code_execution