pydicom

Pass

Audited by Gen Agent Trust Hub on Feb 16, 2026

Risk Level: LOWEXTERNAL_DOWNLOADS
Full Analysis
  • [Indirect Prompt Injection] (LOW): The skill is designed to process external DICOM files which may contain untrusted metadata strings.
  • Ingestion points: pydicom.dcmread() in SKILL.md.
  • Boundary markers: None present in code examples.
  • Capability inventory: Data extraction, metadata modification, and visualization.
  • Sanitization: No explicit sanitization of DICOM tags before processing.
  • [External Downloads] (LOW): The skill references standard Python packages (pydicom, matplotlib, numpy). While these are industry-standard, they represent a dependency on external sources.
Audit Metadata
Risk Level
LOW
Analyzed
Feb 16, 2026, 12:37 PM