openpiv
Pass
Audited by Gen Agent Trust Hub on Jul 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill utilizes the legitimate and well-known OpenPIV scientific library for fluid dynamics analysis. All operations, including file reading and writing, are consistent with the skill's stated purpose of processing experimental image data and generating vector fields.
- [DATA_INGESTION]: The skill processes external image files (BMP) and data files (NPZ, TXT) through the
PIVAnalyzerandrun_openpivcomponents. While this presents a surface for indirect prompt injection, the risk is negligible as the data is processed numerically by libraries like NumPy and OpenPIV rather than being interpreted as instructional content for the agent. - [COMMAND_EXECUTION]: The skill uses the Bash tool to run Python scripts (
runner.py,run_example.py) for processing workflows. This is a standard use case for executing local automation and does not involve spawning arbitrary or untrusted shells.
Audit Metadata