pixel-art

Pass

Audited by Gen Agent Trust Hub on Sep 13, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No malicious patterns, prompt injections, or obfuscation techniques were identified in the skill instructions or supporting scripts.
  • [COMMAND_EXECUTION]: The script scripts/pixel_art_video.py utilizes subprocess.run to invoke the ffmpeg utility for video encoding and GIF generation. The implementation follows security best practices by passing arguments as a list rather than a shell string, effectively mitigating shell injection risks. This functionality is essential for the skill's stated purpose of video creation.
  • [DATA_EXPOSURE]: The skill does not access sensitive system files or credentials. Example paths provided in the documentation are illustrative of the platform's standard directory structure.
  • [EXTERNAL_DOWNLOADS]: The skill does not perform remote downloads or fetch code from external servers. It relies on pre-installed dependencies (Pillow, ffmpeg) and local assets.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 13, 2026, 07:35 PM
Security Audit — agent-trust-hub — pixel-art