id-photo
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a shell script (
scripts/idphoto.sh) that executescurlandpython3commands to communicate with a local API and process Base64-encoded image data. - Evidence: The script uses
curlto POST image files to an API endpoint defined by theIDPHOTO_API_URLenvironment variable. - Evidence: The script pipes API responses to
python3for JSON parsing and image decoding using thebase64module. - Analysis: The execution is scoped to processing image data via a user-deployed Docker container (
linzeyi/hivision_idphotos). The use ofpython3 -cis limited to standard data transformation tasks.
Audit Metadata