imaging-data-commons
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches medical imaging data (DICOM files) and metadata artifacts from NCI Imaging Data Commons repositories hosted on AWS S3 and Google Cloud Storage.
- [COMMAND_EXECUTION]: Instructs the agent to execute shell commands using
subprocess.runto install and upgrade theidc-indexPython package from PyPI. - [INDIRECT_PROMPT_INJECTION]: Ingests and processes external imaging metadata and clinical records, which serves as a potential surface for indirect prompt injection.
- Ingestion points: Processes external database results via
client.sql_query()andclient.get_clinical_table(). - Boundary markers: None explicitly used for data interpolation.
- Capability inventory: Possesses capabilities to download files to the local system and generate URLs for browser visualization.
- Sanitization: Relies on the standard data structures of the
idc-indexand DuckDB libraries for processing results.
Audit Metadata