visual-flow-gif
Pass
Audited by Gen Agent Trust Hub on Jul 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires installing the
Pillowlibrary, which is a well-known, established, and trusted image processing package. \n - Evidence: Found in
requirements.txtand described in the setup instructions inSKILL.md.\n- [COMMAND_EXECUTION]: The skill executes a local Python script (scripts/render_animated_gif.py) to generate PNG and GIF files. \n - Evidence: The rendering command is defined in the
SKILL.mdworkflow. The script performs local image manipulation and does not require network access.\n- [PROMPT_INJECTION]: The skill processes untrusted source material (e.g., articles, workflow notes) which represents a surface for indirect prompt injection. \n - Ingestion points:
SKILL.md(Workflow Step 1: "Read the source material").\n - Boundary markers: Absent; the skill does not define explicit delimiters to separate user data from instructions.\n
- Capability inventory: The rendering script has file-writing capabilities and accesses system font directories.\n
- Sanitization: Absent; the skill relies on the AI agent to interpret the source material and correctly generate the diagram specification JSON.
Audit Metadata