siril-mosaic

Pass

Audited by Gen Agent Trust Hub on Sep 23, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes the siril-cli tool as its core functionality. It employs secure coding practices by avoiding shell execution and using a custom sanitization function, siril_quote, to prevent argument injection vulnerabilities.
  • [DYNAMIC_EXECUTION]: Siril processing scripts are generated at runtime to handle specific mosaic tasks. These scripts are written to isolated directories and use validated numeric and string parameters, minimizing the risk of arbitrary script execution.
  • [SAFE]: The implementation includes defensive file handling techniques, such as opening files with O_NOFOLLOW and verifying that all input paths are regular files residing within the expected source directory.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 23, 2026, 12:53 PM