Global Surface Water

• Outcome: Review
• Latest audit: Jul 24, 2026 · 6:54 PM UTC
• Version: 0.2.0

Overview

This appears to be a legitimate public surface-water data downloader, with some dependency and documentation issues users should notice before running it.

Install only if you are comfortable with a CLI that downloads large public GeoTIFF tiles over the network and writes them locally. Review or avoid the extra unpinned global_surface_water dependency in requirements.txt, prefer pinned patched dependencies, and do not assume the bbox is cropped exactly; plan for whole-tile bandwidth and disk usage.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration
• MCP Tool Poisoning: Hidden Instructions, Unicode Deception, Parameter Description Injection
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration

Findings (7)

Lp3

Medium

• Category: MCP Least Privilege
• Confidence: 90% confidence
• Finding: The skill clearly performs network downloads, but the metadata does not declare that capability or permission requirement. Undeclared network access weakens reviewability and consent, making it easier for a caller to invoke external data transfers without understanding the trust boundary or operational effects.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 83% confidence
• Finding: The documented behavior does not fully match what the skill says it does: it exposes extra commands, supports an undocumented layer, and most importantly appears to download whole intersecting tiles rather than clipped bbox outputs as claimed. Behavior mismatches are dangerous because users may underestimate bandwidth, storage use, and data handling, and reviewers cannot reliably assess what the skill will actually do.

Unpinned Dependencies

Low

• Category: Supply Chain

Content

global_surface_water
requests>=2.28.0
tqdm>=4.64.0

• Confidence: 90% confidence
• Finding: global_surface_water

Unpinned Dependencies

Low

• Category: Supply Chain

Content

global_surface_water
requests>=2.28.0
tqdm>=4.64.0

• Confidence: 98% confidence
• Finding: requests>=2.28.0

Unpinned Dependencies

Low

• Category: Supply Chain

Content

global_surface_water
requests>=2.28.0
tqdm>=4.64.0

• Confidence: 88% confidence
• Finding: tqdm>=4.64.0

Known Vulnerable Dependency: requests==2.28.0 — 8 advisory(ies): CVE-2024-47081 (Requests vulnerable to .netrc credentials leak via malicious URLs); CVE-2024-35195 (Requests `Session` object does not verify requests after making first request wi); CVE-2026-25645 (Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility func) +5 more

High

• Category: Supply Chain
• Confidence: 97% confidence
• Finding: requests==2.28.0

Known Vulnerable Dependency: tqdm==4.64.0 — 2 advisory(ies): CVE-2024-34062 (tqdm CLI arguments injection attack); CVE-2024-34062 (tqdm CLI arguments injection attack)

Low

• Category: Supply Chain
• Confidence: 76% confidence
• Finding: tqdm==4.64.0

VirusTotal

65/65 vendors flagged this skill as clean.

Static analysis

Detected: suspicious.dynamic_code_execution

Dynamic code execution detected.

Critical

• Code: suspicious.dynamic_code_execution
• Location: tests/test_global-surface-water.py:26