slack-gif-creator
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill instructions do not contain any patterns intended to bypass AI safety guidelines or override system behavior. All instructions are focused on the stated purpose of GIF creation.
- [DATA_EXPOSURE_AND_EXFILTRATION]: No sensitive information, such as API keys, tokens, or private file paths, is accessed or exposed. The skill does not perform any network operations; all processing is handled locally within the agent's environment.
- [OBFUSCATION]: There is no evidence of Base64 encoding, zero-width characters, homoglyphs, or other techniques used to hide malicious logic or hidden URLs.
- [UNVERIFIABLE_DEPENDENCIES_AND_REMOTE_CODE_EXECUTION]: All dependencies listed in
requirements.txtare standard, well-known Python packages from public registries. The skill does not download or execute remote scripts or arbitrary shell commands. - [INDIRECT_PROMPT_INJECTION]: While the skill renders user-provided text into images (which can theoretically be an attack surface for OCR-based injection), the skill lacks the system-level capabilities (like network access or file writing) required to exploit such a vulnerability.
- [DYNAMIC_EXECUTION]: The code uses standard image processing libraries and does not employ unsafe dynamic execution methods such as
eval(),exec(), or unsafe deserialization of untrusted data.
Audit Metadata