gif-maker

Pass

Audited by Gen Agent Trust Hub on Feb 16, 2026

Risk Level: LOW
Full Analysis
  • EXTERNAL_DOWNLOADS (SAFE): The skill installs the Pillow library via pip from the official Python Package Index (PyPI). This is a standard dependency for image processing and follows established best practices for agent skills.
  • COMMAND_EXECUTION (SAFE): The make_gif.py script executes the gifsicle utility using subprocess.run with a list of arguments. This approach is secure as it avoids shell interpretation, thereby preventing command injection vulnerabilities.
  • DATA_EXPOSURE & EXFILTRATION (SAFE): The skill only interacts with local files provided as input (images) and generates local output files. There are no network operations or access to sensitive system directories detected.
Audit Metadata
Risk Level
LOW
Analyzed
Feb 16, 2026, 08:49 AM