Skills
skills/x-cmd/skill/gif-sticker-maker/Gen Agent Trust Hub

gif-sticker-maker

Pass

Audited by Gen Agent Trust Hub on Apr 10, 2026

Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/convert_mp4_to_gif.py uses the subprocess module to execute ffmpeg for media conversion. This interaction with system binaries is standard for processing video files into GIFs.- [DATA_EXFILTRATION]: The skill transmits local images and user-provided text captions to the MiniMax API (via MINIMAX_API_BASE) to generate content. This network activity is documented and required for the skill's core functionality.- [PROMPT_INJECTION]: User-provided captions are interpolated into prompts within assets/image-prompt-template.txt and assets/video-prompt-template.txt without strict sanitization, creating a surface for indirect prompt injection. * Ingestion points: User-provided captions entering via SKILL.md Step 0. * Boundary markers: None; captions are placed inside quotes in prompt templates. * Capability inventory: Local file access, network operations (requests), and system command execution (ffmpeg). * Sanitization: No validation or escaping is applied to the input text before generation.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 10, 2026, 05:41 AM