siril-moon-stacking

Pass

Audited by Gen Agent Trust Hub on Sep 23, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill automates astronomical image processing by executing the Siril command-line utility (siril-cli). It uses subprocess.run with structured argument lists, which is a secure method for calling external tools and prevents shell injection.
  • [DYNAMIC_EXECUTION]: At runtime, the Python driver generates Siril script files (.ssf) based on the processing steps required. These scripts are executed in an isolated working directory, ensuring that the original input data remains untouched.
  • [DYNAMIC_EXECUTION]: The diagnostic probe command uses __import__ to dynamically check for the presence of required imaging and scientific libraries (numpy, astropy, cv2, skimage). The modules being imported are hardcoded and reputable.
  • [INDIRECT_PROMPT_INJECTION]: The skill extracts metadata from FITS image headers. To prevent potential injection or formatting issues, the script explicitly casts these values (such as aperture and focal length) to floating-point numbers before incorporating them into processing scripts.
  • [SAFE]: The skill adheres to security best practices by using an isolated workspace for all generated files and employing symbolic links (os.symlink) to reference input images without modifying them.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 23, 2026, 11:23 AM