osirix
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external clinical data and identifiers which could potentially be used for indirect prompt injection attacks.\n
- Ingestion points: The skill ingests data through
pacs_query_retrieve.py(via command-line arguments),audit_osirix_study.py(by scanning DICOM file metadata in user-provided directories), andexport_key_images.scpt(processing patient identifiers).\n - Boundary markers: No explicit delimiters or instructions are provided to distinguish between trusted commands and untrusted data within the agent's context.\n
- Capability inventory: The skill facilitates network operations using
pynetdicom(DICOMC-FINDandC-MOVEoperations), local database management viasqlite3, and file system interactions such as JPEG exports.\n - Sanitization: There are no built-in validation or sanitization mechanisms to filter clinical metadata before it is used in automated workflows.\n- [EXTERNAL_DOWNLOADS]: The skill suggests the installation of well-known and reputable Python libraries specialized for medical imaging.\n
- Python packages:
pydicomandpynetdicomare required for the DICOM networking and auditing scripts.\n- [COMMAND_EXECUTION]: The skill provides instructions and scripts that execute various system commands for workstation automation and maintenance.\n - Database maintenance is performed using
sqlite3to optimize the OsiriX SQLite database (VACUUM,ANALYZE).\n - Workflow automation is achieved through
osascript, which executes AppleScripts to interact with the OsiriX application.\n - System diagnostic tools like
lsof,open, andcurlare utilized to manage network ports and trigger URL schemes.
Audit Metadata