sci-figure

Pass

Audited by Gen Agent Trust Hub on May 15, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The script src/utils.py uses subprocess.run to execute the tesseract --version command. This is used solely to verify that the Tesseract OCR dependency is installed and to retrieve its version number. It does not handle untrusted input or user-provided arguments in a dangerous manner.\n- [REMOTE_CODE_EXECUTION]: The function check_dependencies in src/utils.py uses the __import__ function to check for the presence of required Python modules. The modules are selected from a hardcoded dictionary of known safe dependencies, which is a standard practice for environment validation.\n- [METADATA_POISONING]: The Chinese documentation (README_CN.md) contains several non-printable ASCII control characters (such as BEL, Backspace, and Form Feed) embedded within command examples. These appear to be accidental artifacts of text encoding or character corruption and do not represent a security threat.
Audit Metadata
Risk Level
SAFE
Analyzed
May 15, 2026, 02:11 PM
Security Audit — agent-trust-hub — sci-figure