gifgrep
Warn
Audited by Gen Agent Trust Hub on Mar 17, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the
gifgrepbinary using Homebrew fromsteipete/tap/gifgrepor via the Go package manager fromgithub.com/steipete/gifgrep/cmd/gifgrep@latest. These sources are associated with an individual developer and are not part of the trusted vendor list. - [COMMAND_EXECUTION]: The skill invokes the
gifgrepcommand line tool to perform operations such as searching APIs, downloading files to the~/Downloadsdirectory, and generating image sheets. This execution grants the external binary access to local file system paths and network resources. - [DATA_EXPOSURE]: The skill documentation indicates the use of environment variables
GIPHY_API_KEYandTENOR_API_KEY. While no keys are hardcoded, the skill is designed to handle sensitive API credentials.
Audit Metadata