slack-gif-creator
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides a set of animation primitives (bounce, shake, fade, etc.) and validators to ensure GIFs meet Slack's specific size and dimension constraints. All operations are conducted locally using the Pillow and ImageIO libraries.
- [EXTERNAL_DOWNLOADS]: The skill relies on standard, well-known Python packages including
pillow,imageio, andnumpyfor its core functionality. These are reputable libraries widely used for image and data processing. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied text and emojis to generate animation frames. While it has the capability to write files to disk, this is consistent with its primary purpose of creating GIF files.
- Ingestion points: Animation scripts in the
templates/directory accept user-defined object data, such as emoji characters and text strings. - Boundary markers: None present in the logic to distinguish between user data and instructions, though the data is treated as strings for rendering.
- Capability inventory: The skill uses
GIFBuilder.saveincore/gif_builder.pyto write the resulting image files to the local file system. - Sanitization: The skill renders input directly using Pillow's text rendering engine without specific sanitization of the input strings.
Audit Metadata