Security audit
Vegetation Indices Skill
Security checks for vulnerabilities and agentic risk
Overview
This skill is a local vegetation-index lookup tool and its behavior matches its stated purpose.
Installers should expect a local Python script that searches bundled vegetation-index datasets and returns source URLs for reference. It is benign based on the inspected artifacts, though users should remember the bundled scientific data may become stale and should verify source links for critical work.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.