- AboveQGIS Processing plugin: search, download, mosaic, hillshade tools
- County dropdown (120 counties), product selector, map extent support
- Auto-installs abovepy dependency on first run
- CLI --buffer-feet flag using EPSG:3089 for accurate feet-based queries
- CLI --format provenance for full metadata output
- Security: path traversal protection (sanitize_filename, validate_path_segment)
- Security: URL injection prevention in TiTiler URL builders
- Security: S3 bucket name validation, json.dumps for algorithm params
- Security: validate_remote_url raises ValueError for untrusted hosts
- buffer_feet() and corridor_buffer() exported at top level