safe-chains 0.167.0

Auto-allow safe bash commands in agentic coding tools
Documentation
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
[[command]]
name = "identify"
description = "Reports the format, dimensions, color depth, and other metadata of image files (part of ImageMagick). Strictly read-only — it inspects image headers and pixel data without modifying the original files. However, ImageMagick's parser has a history of memory-corruption CVEs triggered by malformed input images, so running it on untrusted files carries risk. ImageMagick releases happen several times per year, occasionally adding new -define and -list options."
url = "https://imagemagick.org/script/identify.php"
level = "Inert"
bare = false
standalone = [
    "--help", "--verbose", "--version", "-V", "-h", "-ping", "-quiet", "-regard-warnings", "-verbose",
]
valued = [
    "-channel", "-define", "-density", "-depth",
    "-features", "-format", "-fuzz", "-interlace",
    "-limit", "-list", "-log", "-moments",
    "-monitor", "-precision", "-seed", "-set",
    "-size", "-strip", "-unique", "-virtual-pixel",
]