pydicom
Pass
Audited by Gen Agent Trust Hub on Jun 27, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides standard functionality for medical image processing. Analysis of the scripts and instructions revealed no signs of malicious patterns, obfuscation, or unauthorized data access.
- [PROMPT_INJECTION]: The skill ingests external data from DICOM files (metadata and pixel data), creating a surface for potential indirect prompt injection.
- Ingestion points:
pydicom.dcmreadinSKILL.md,scripts/anonymize_dicom.py,scripts/dicom_to_image.py, andscripts/extract_metadata.py. - Boundary markers: None specified for the data ingestion process.
- Capability inventory: Local file system read and write operations via
pydicom.dcmreadandDataset.save_as. - Sanitization: A dedicated script
scripts/anonymize_dicom.pyis provided to sanitize sensitive Patient Health Information (PHI).
Audit Metadata