slack-gif-creator
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: Indirect Prompt Injection Surface. The skill allows for the creation of GIFs based on text and emoji inputs, which could be populated with untrusted data if the agent processes external content.
- Ingestion points: Parameters in templates/shake.py, templates/pulse.py, and other animation scripts ingest text and emoji data.
- Boundary markers: Absent.
- Capability inventory: File-write operations are available via core/gif_builder.py.
- Sanitization: Absent.
- [SAFE]: Verified Dependencies. The requirements.txt file lists standard libraries such as pillow, numpy, and imageio. These are legitimate tools for image processing.
- [SAFE]: No network exfiltration or credential access. The skill operates entirely on local frame composition and file saving. No API keys, hardcoded secrets, or network calls are present.
- [SAFE]: Absence of obfuscation. No Base64-encoded instructions, zero-width characters, or hidden scripts were detected in the provided files.
Audit Metadata