osm-data-download

• Outcome: Review
• Latest audit: Jul 25, 2026 · 6:46 AM UTC
• Version: 0.2.1

Overview

This skill is a user-run OpenStreetMap downloader whose network access and file output match its stated purpose, with dependency and disclosure caveats to review.

Install only in an environment where outbound requests to Overpass are allowed, avoid sensitive location queries unless you are comfortable sending them to that API, choose output paths carefully, and prefer updated pinned dependencies or a lockfile before using Shapefile export.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access

Findings (9)

Lp3

Medium

• Category: MCP Least Privilege
• Confidence: 93% confidence
• Finding: The skill documentation describes capabilities that perform outbound network access to Overpass API endpoints and write downloaded data to user-specified files, but the skill does not declare corresponding permissions. This creates a transparency and policy gap: users or hosting platforms may underestimate the skill's ability to exfiltrate request metadata externally or overwrite/create local files when invoked.

Missing User Warnings

Low

• Confidence: 89% confidence
• Finding: The documentation explains usage but does not present a clear up-front warning that executing the skill will send outbound HTTP requests to third-party Overpass endpoints and write results to disk at the provided path. This omission can lead to unsafe use in restricted environments or accidental disclosure of sensitive locations, query contents, or unintended file creation.

Unpinned Dependencies

Low

• Category: Supply Chain

Content

fiona>=1.8.0
requests>=2.28.0
shapely>=1.8.0
tqdm>=4.64.0

• Confidence: 94% confidence
• Finding: fiona>=1.8.0

Unpinned Dependencies

Low

• Category: Supply Chain

Content

fiona>=1.8.0
requests>=2.28.0
shapely>=1.8.0
tqdm>=4.64.0

• Confidence: 95% confidence
• Finding: requests>=2.28.0

Unpinned Dependencies

Low

• Category: Supply Chain

Content

fiona>=1.8.0
requests>=2.28.0
shapely>=1.8.0
tqdm>=4.64.0

• Confidence: 93% confidence
• Finding: shapely>=1.8.0

Unpinned Dependencies

Low

• Category: Supply Chain

Content

fiona>=1.8.0
requests>=2.28.0
shapely>=1.8.0
tqdm>=4.64.0

• Confidence: 92% confidence
• Finding: tqdm>=4.64.0

Known Vulnerable Dependency: fiona==1.8.0 — 2 advisory(ies): GHSA-g4m4-9q4c-mfw6 (Fiona affected by CVE-2020-14152 related to madler-zlib); GHSA-q5fm-55c2-v6j9 (Fiona affected by CVE-2023-45853 related to MiniZip madler-zlib)

Critical

• Category: Supply Chain
• Confidence: 98% confidence
• Finding: fiona==1.8.0

Known Vulnerable Dependency: requests==2.28.0 — 8 advisory(ies): CVE-2024-47081 (Requests vulnerable to .netrc credentials leak via malicious URLs); CVE-2024-35195 (Requests `Session` object does not verify requests after making first request wi); CVE-2026-25645 (Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility func) +5 more

High

• Category: Supply Chain
• Confidence: 99% confidence
• Finding: requests==2.28.0

Known Vulnerable Dependency: tqdm==4.64.0 — 2 advisory(ies): CVE-2024-34062 (tqdm CLI arguments injection attack); CVE-2024-34062 (tqdm CLI arguments injection attack)

Low

• Category: Supply Chain
• Confidence: 86% confidence
• Finding: tqdm==4.64.0

VirusTotal

65/65 vendors flagged this skill as clean.

Static analysis

Detected: suspicious.dynamic_code_execution

Dynamic code execution detected.

Critical

• Code: suspicious.dynamic_code_execution
• Location: tests/test_osm-data-download.py:14