slack-gif-creator

Pass

Audited by Gen Agent Trust Hub on Aug 30, 2026

Risk Level: SAFE
Full Analysis
  • [PROMPT_INJECTION]: The skill instructions do not contain any patterns intended to bypass AI safety guidelines or override system behavior. All instructions are focused on the stated purpose of GIF creation.
  • [DATA_EXPOSURE_AND_EXFILTRATION]: No sensitive information, such as API keys, tokens, or private file paths, is accessed or exposed. The skill does not perform any network operations; all processing is handled locally within the agent's environment.
  • [OBFUSCATION]: There is no evidence of Base64 encoding, zero-width characters, homoglyphs, or other techniques used to hide malicious logic or hidden URLs.
  • [UNVERIFIABLE_DEPENDENCIES_AND_REMOTE_CODE_EXECUTION]: All dependencies listed in requirements.txt are standard, well-known Python packages from public registries. The skill does not download or execute remote scripts or arbitrary shell commands.
  • [INDIRECT_PROMPT_INJECTION]: While the skill renders user-provided text into images (which can theoretically be an attack surface for OCR-based injection), the skill lacks the system-level capabilities (like network access or file writing) required to exploit such a vulnerability.
  • [DYNAMIC_EXECUTION]: The code uses standard image processing libraries and does not employ unsafe dynamic execution methods such as eval(), exec(), or unsafe deserialization of untrusted data.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 30, 2026, 02:56 PM
Security Audit — agent-trust-hub — slack-gif-creator