slack-gif-creator

Pass

Audited by Gen Agent Trust Hub on Sep 25, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill provides a set of animation primitives (bounce, shake, fade, etc.) and validators to ensure GIFs meet Slack's specific size and dimension constraints. All operations are conducted locally using the Pillow and ImageIO libraries.
  • [EXTERNAL_DOWNLOADS]: The skill relies on standard, well-known Python packages including pillow, imageio, and numpy for its core functionality. These are reputable libraries widely used for image and data processing.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied text and emojis to generate animation frames. While it has the capability to write files to disk, this is consistent with its primary purpose of creating GIF files.
  • Ingestion points: Animation scripts in the templates/ directory accept user-defined object data, such as emoji characters and text strings.
  • Boundary markers: None present in the logic to distinguish between user data and instructions, though the data is treated as strings for rendering.
  • Capability inventory: The skill uses GIFBuilder.save in core/gif_builder.py to write the resulting image files to the local file system.
  • Sanitization: The skill renders input directly using Pillow's text rendering engine without specific sanitization of the input strings.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 25, 2026, 09:15 AM