ClawHub
Back to skill

Security audit

Geoskill: Infrastructure Site Selection

Security checks across malware telemetry and agentic risk

Overview

This skill appears to perform disclosed geospatial site-suitability analysis, with optional online data download and local output/cache files.

Before installing, consider whether outbound geospatial data requests and local caching are acceptable for your environment. If you use this in production or a controlled setting, pin the dependencies and set an explicit cache/output directory.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (6)

Vague Triggers

Medium
Confidence
85% confidence
Finding
The skill description uses broad trigger language such as 'Use when the user wants to analyze changes, compare multi-temporal rasters, compute indices, or generate assessment reports,' which expands invocation beyond clearly bounded infrastructure site-selection tasks. In an agent setting, vague routing criteria can cause the skill to be selected for unrelated geospatial requests, increasing the chance of unexpected execution paths, unintended network use, or misuse of local/remote data handling behaviors.

Missing User Warnings

Medium
Confidence
93% confidence
Finding
The documentation states that the skill can automatically download data from Microsoft Planetary Computer and cache it locally, but it does not present a clear user-facing warning or consent requirement before network access and disk writes occur. In an agent environment, silent remote access and persistent caching can violate user expectations, leak contextual information through outbound requests, and create privacy or compliance issues on restricted systems.

Unpinned Dependencies

Low
Category
Supply Chain
Content
geoskill-data-fetcher>=0.2.0

# Third-party dependencies used by this skill
numpy
rasterio
shapely
Confidence
95% confidence
Finding
numpy

Unpinned Dependencies

Low
Category
Supply Chain
Content
# Third-party dependencies used by this skill
numpy
rasterio
shapely
Confidence
95% confidence
Finding
rasterio

Unpinned Dependencies

Low
Category
Supply Chain
Content
# Third-party dependencies used by this skill
numpy
rasterio
shapely
Confidence
95% confidence
Finding
shapely

Unpinned Dependencies

Low
Category
Supply Chain
Content
# Requirements for infrastructure-site-selection
# Shared data-download library (Planetary Computer / NASA POWER / OSM)
geoskill-data-fetcher>=0.2.0

# Third-party dependencies used by this skill
numpy
Confidence
98% confidence
Finding
geoskill-data-fetcher>=0.2.0

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

Detected: suspicious.dynamic_code_execution

Dynamic code execution detected.

Critical
Code
suspicious.dynamic_code_execution
Location
scripts/infrastructure_site_selection.py:369