siril-mosaic
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the
siril-clitool as its core functionality. It employs secure coding practices by avoiding shell execution and using a custom sanitization function,siril_quote, to prevent argument injection vulnerabilities. - [DYNAMIC_EXECUTION]: Siril processing scripts are generated at runtime to handle specific mosaic tasks. These scripts are written to isolated directories and use validated numeric and string parameters, minimizing the risk of arbitrary script execution.
- [SAFE]: The implementation includes defensive file handling techniques, such as opening files with
O_NOFOLLOWand verifying that all input paths are regular files residing within the expected source directory.
Audit Metadata