slack-gif-creator
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFE
Full Analysis
- General (SAFE): No security threats detected. The skill provides animation logic and image manipulation utilities using standard libraries.
- Unverifiable Dependencies & Remote Code Execution (SAFE): The dependencies listed in
requirements.txt(Pillow, imageio, numpy) are well-known, versioned, and sourced from standard registries. No remote scripts or dynamic code execution patterns are present. - Indirect Prompt Injection (SAFE): Although the skill processes user-uploaded images, it does not extract text or metadata for interpolation into LLM prompts. Its capabilities are strictly limited to pixel manipulation and local file saving of images.
- Data Exposure & Exfiltration (SAFE): The skill does not access sensitive system paths or credentials, nor does it perform any network requests.
Audit Metadata