qwen-mm-plugins-nifti
Pass
Audited by Gen Agent Trust Hub on Oct 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill defines tools for the
qwen-mm-plugins-niftiMCP server, enabling the inspection of metadata and the rendering of image slices from NIfTI (.nii, .nii.gz) files. The functionality is consistent with its stated purpose of medical volume inspection. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data from local files. Metadata extracted from these files is returned to the agent context. This represents a standard attack surface for any tool that reads external data; however, the risk is minimal given the specialized binary structure of the NIfTI format and the intended use case.
- [COMMAND_EXECUTION]: The skill requires absolute file paths to access local NIfTI data. While this allows the agent to read local files, the operations are restricted to non-modifying read and render actions within the scope of the provided tools.
Audit Metadata