siril-moon-stacking
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill automates astronomical image processing by executing the Siril command-line utility (
siril-cli). It usessubprocess.runwith structured argument lists, which is a secure method for calling external tools and prevents shell injection. - [DYNAMIC_EXECUTION]: At runtime, the Python driver generates Siril script files (
.ssf) based on the processing steps required. These scripts are executed in an isolated working directory, ensuring that the original input data remains untouched. - [DYNAMIC_EXECUTION]: The diagnostic
probecommand uses__import__to dynamically check for the presence of required imaging and scientific libraries (numpy,astropy,cv2,skimage). The modules being imported are hardcoded and reputable. - [INDIRECT_PROMPT_INJECTION]: The skill extracts metadata from FITS image headers. To prevent potential injection or formatting issues, the script explicitly casts these values (such as aperture and focal length) to floating-point numbers before incorporating them into processing scripts.
- [SAFE]: The skill adheres to security best practices by using an isolated workspace for all generated files and employing symbolic links (
os.symlink) to reference input images without modifying them.
Audit Metadata