sci-figure
Pass
Audited by Gen Agent Trust Hub on May 15, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The script
src/utils.pyusessubprocess.runto execute thetesseract --versioncommand. This is used solely to verify that the Tesseract OCR dependency is installed and to retrieve its version number. It does not handle untrusted input or user-provided arguments in a dangerous manner.\n- [REMOTE_CODE_EXECUTION]: The functioncheck_dependenciesinsrc/utils.pyuses the__import__function to check for the presence of required Python modules. The modules are selected from a hardcoded dictionary of known safe dependencies, which is a standard practice for environment validation.\n- [METADATA_POISONING]: The Chinese documentation (README_CN.md) contains several non-printable ASCII control characters (such as BEL, Backspace, and Form Feed) embedded within command examples. These appear to be accidental artifacts of text encoding or character corruption and do not represent a security threat.
Audit Metadata