<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE article PUBLIC "-//NLM//DTD Journal Publishing DTD v3.0 20080202//EN" "https://jats.nlm.nih.gov/nlm-dtd/publishing/3.0/journalpublishing3.dtd">
<article xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink" article-type="research-article" dtd-version="3.0" xml:lang="en">
<front>
<journal-meta>
<journal-id journal-id-type="publisher">ISPRS-Archives</journal-id>
<journal-title-group>
<journal-title>The International Archives of the Photogrammetry, Remote Sensing and Spatial Information Sciences</journal-title>
<abbrev-journal-title abbrev-type="publisher">ISPRS-Archives</abbrev-journal-title>
<abbrev-journal-title abbrev-type="nlm-ta">Int. Arch. Photogramm. Remote Sens. Spatial Inf. Sci.</abbrev-journal-title>
</journal-title-group>
<issn pub-type="epub">2194-9034</issn>
<publisher><publisher-name>Copernicus Publications</publisher-name>
<publisher-loc>Göttingen, Germany</publisher-loc>
</publisher>
</journal-meta>
<article-meta>
<article-id pub-id-type="doi">10.5194/isprs-archives-XLIX-B3-2026-1419-2026</article-id>
<title-group>
<article-title>Risk-Aware LLM Agents for Geospatial Data Retrieval: Design and Preliminary Adversarial Evaluation</article-title>
</title-group>
<contrib-group><contrib contrib-type="author" xlink:type="simple"><name name-style="western"><surname>Gao</surname>
<given-names>Kyle</given-names>
</name>
<xref ref-type="aff" rid="aff1">
<sup>1</sup>
</xref>
</contrib>
<contrib contrib-type="author" xlink:type="simple"><name name-style="western"><surname>Cumming</surname>
<given-names>Joel</given-names>
</name>
<xref ref-type="aff" rid="aff2">
<sup>2</sup>
</xref>
</contrib>
<contrib contrib-type="author" xlink:type="simple"><name name-style="western"><surname>Li</surname>
<given-names>Jonathan</given-names>
</name>
<xref ref-type="aff" rid="aff1">
<sup>1</sup>
</xref>
<xref ref-type="aff" rid="aff3">
<sup>3</sup>
</xref>
</contrib>
<contrib contrib-type="author" xlink:type="simple"><name name-style="western"><surname>Xu</surname>
<given-names>Linlin</given-names>
</name>
<xref ref-type="aff" rid="aff4">
<sup>4</sup>
</xref>
</contrib>
<contrib contrib-type="author" xlink:type="simple"><name name-style="western"><surname>Clausi</surname>
<given-names>David</given-names>
</name>
<xref ref-type="aff" rid="aff1">
<sup>1</sup>
</xref>
</contrib>
</contrib-group><aff id="aff1">
<label>1</label>
<addr-line>Dept. of Systems Design Engineering, University of Waterloo, Waterloo, ON, N2L 3G1, Canada</addr-line>
</aff>
<aff id="aff2">
<label>2</label>
<addr-line>SkyWatch, Kitchener, ON, N2H 2G8, Canada</addr-line>
</aff>
<aff id="aff3">
<label>3</label>
<addr-line>Dept. of Geography and Environmental Management, University of Waterloo, Waterloo, ON, N2L 3G1, Canada</addr-line>
</aff>
<aff id="aff4">
<label>4</label>
<addr-line>Dept. of Geomatics Engineering, University of Calgary, Calgary, AB, T2N 1N4, Canada</addr-line>
</aff>
<pub-date pub-type="epub">
<day>31</day>
<month>07</month>
<year>2026</year>
</pub-date>
<volume>XLIX-B3-2026</volume>
<fpage>1419</fpage>
<lpage>1426</lpage>
<permissions>
<copyright-statement>Copyright: &#x000a9; 2026 Kyle Gao et al.</copyright-statement>
<copyright-year>2026</copyright-year>
<license license-type="open-access">
<license-p>This work is licensed under the Creative Commons Attribution 4.0 International License. To view a copy of this licence, visit <ext-link ext-link-type="uri"  xlink:href="https://creativecommons.org/licenses/by/4.0/">https://creativecommons.org/licenses/by/4.0/</ext-link></license-p>
</license>
</permissions>
<self-uri xlink:href="https://isprs-archives.copernicus.org/articles/XLIX-B3-2026/1419/2026/isprs-archives-XLIX-B3-2026-1419-2026.html">This article is available from https://isprs-archives.copernicus.org/articles/XLIX-B3-2026/1419/2026/isprs-archives-XLIX-B3-2026-1419-2026.html</self-uri>
<self-uri xlink:href="https://isprs-archives.copernicus.org/articles/XLIX-B3-2026/1419/2026/isprs-archives-XLIX-B3-2026-1419-2026.pdf">The full text article is available as a PDF file from https://isprs-archives.copernicus.org/articles/XLIX-B3-2026/1419/2026/isprs-archives-XLIX-B3-2026-1419-2026.pdf</self-uri>
<abstract>
<p>We present an LLM-driven framework for retrieving remote sensing data from cloud-based geospatial catalogues using natural language queries. The system converts user intent into structured API calls, enabling efficient access to satellite imagery and environmental datasets. The architecture integrates three agents: &lt;em&gt;Guardrail&lt;/em&gt; for safety and policy enforcement, &lt;em&gt;General-QA&lt;/em&gt; for intent interpretation, and &lt;em&gt;Recommender-Analyst&lt;/em&gt; for schema-aware API call generation. This coordinated design ensures reliable, semantically aligned interaction with external data services. The modular framework is portable across platforms through API schema substitution and supports applications in environmental monitoring, disaster response, and climate analysis. It establishes a scalable interface between user intent and geospatial infrastructure, enabling streamlined and automated Earth observation workflows. Preliminary experiments under adversarial multi-turn settings show that prompt-level safety instructions improve robustness, although rare high-impact failures persist in API manipulation scenarios and highlight the need for adaptive, system-level defenses that balance safety, usability, and cost efficiency, which motivates the use of our intercept-level &lt;em&gt;Guardrail&lt;/em&gt; agent.</p>
</abstract>
<counts><page-count count="8"/></counts>
</article-meta>
</front>
<body/>
<back>
</back>
</article>