pydicom
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external DICOM files which could contain malicious instructions embedded in metadata fields (e.g., PatientName, StudyDescription).
- Ingestion points: Uses
pydicom.dcmread()to load file contents inSKILL.md,scripts/anonymize_dicom.py,scripts/dicom_to_image.py, andscripts/extract_metadata.py. - Boundary markers: None; the instructions do not include delimiters or warnings to ignore instructions found within the data.
- Capability inventory: The skill can read and write to the filesystem and process pixel data. No network capabilities or dynamic code execution surfaces were found.
- Sanitization: Medical metadata is extracted and displayed or saved to new files without validation or escaping of the string content.
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install several third-party libraries via
uv pip. - Dependencies: Recommends
pydicom,pillow,numpy,matplotlib,pylibjpeg,pylibjpeg-libjpeg,pylibjpeg-openjpeg, andpython-gdcmfrom standard package registries. - [COMMAND_EXECUTION]: The skill provides and demonstrates the use of local Python scripts to perform tasks.
- Evidence: Instructions include execution of
scripts/anonymize_dicom.py,scripts/dicom_to_image.py, andscripts/extract_metadata.pyvia the command line.
Audit Metadata