slack-gif-creator
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS] (SAFE): The skill relies on standard, reputable libraries (pillow, imageio, numpy) for its core functionality.
- [PROMPT_INJECTION] (SAFE): System instructions are purely functional and do not attempt to manipulate agent behavior or bypass safety filters.
- [REMOTE_CODE_EXECUTION] (SAFE): No remote code execution or suspicious shell command patterns were found.
- [DATA_EXFILTRATION] (SAFE): There are no network requests to untrusted domains or attempts to access sensitive local files like credentials or SSH keys.
- [COMMAND_EXECUTION] (SAFE): The skill operates entirely within the Python runtime using standard libraries; no risky subprocess or system-level calls are used.
- [Indirect Prompt Injection] (SAFE): Although the skill processes user-provided images, the capability surface is restricted to image processing with no path to shell execution or network exfiltration. * Ingestion points: SKILL.md (PIL Image.open). * Boundary markers: Not applicable for image data. * Capability inventory: core/gif_builder.py (local file writing). * Sanitization: Relies on standard PIL library parsing.
Audit Metadata