cv-opencv
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches pre-trained models (e.g., YuNet face detector ONNX) from the official OpenCV model zoo on GitHub as part of the setup instructions.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted image, video, and model files which could be used as an ingestion surface for indirect prompt injection attacks.
- Ingestion points: The
scripts/cv.pyscript ingests data via subcommandsinfo,capture,detect-faces,track,yolo,calibrate, andstitch, utilizingcv2.imreadandcv2.VideoCaptureto load external files and network streams. - Boundary markers: No specific delimiters or boundary warnings are implemented for the binary content of images or videos being processed.
- Capability inventory: The skill possesses the capability to write files (
cv2.imwrite,cv2.VideoWriter,cv2.FileStorage) and access network streams via RTSP (cv2.VideoCapture). - Sanitization: No sanitization is performed on the internal content of the binary data or the architecture of loaded DNN models.
Audit Metadata