slack-gif-creator
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFE
Full Analysis
- General Analysis (SAFE): The skill is well-structured and focuses entirely on programmatic image generation and GIF assembly. It does not perform any network operations, access sensitive file paths, or attempt to execute arbitrary commands.
- Indirect Prompt Injection (SAFE): The skill ingests user-defined text and emoji characters (e.g., in
templates/slide.pyandtemplates/pulse.py). Evidence chain: - Ingestion points:
object_dataparameters in template functions. - Boundary markers: Not applicable as the input is treated as visual data.
- Capability inventory: Image rendering via PIL; file writing via
imageio. No shell or network capabilities. - Sanitization: Standard PIL font/emoji rendering handles the input safely as graphical data.
- Dependencies (SAFE): The dependencies listed in
requirements.txt(pillow, imageio, imageio-ffmpeg, numpy) are reputable, standard libraries for media processing. - Obfuscation (SAFE): No evidence of Base64, zero-width characters, or other encoding-based obfuscation techniques was found.
Audit Metadata