ascii-image-to-ascii
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns were detected. The skill's functionality is consistent with its stated purpose of ASCII art generation.
- [EXTERNAL_DOWNLOADS]: The skill requires the 'pillow' library. This is a well-known, trusted package for image processing in the Python ecosystem.
- [COMMAND_EXECUTION]: The skill executes a local Python script ('scripts/image_to_ascii.py') to perform the conversion. The script uses standard libraries (argparse, PIL) and contains no dangerous subprocess calls, shell injection vectors, or dynamic execution patterns.
- [SAFE]: (Indirect Prompt Injection Surface Analysis)
- Ingestion points: User-supplied image files are processed via the 'imagePath' input in 'SKILL.md'.
- Boundary markers: The 'SKILL.md' includes explicit instructions to 'not fetch/upload images on the user’s behalf', providing clear operational constraints.
- Capability inventory: The script is limited to opening local image files, resizing them, and outputting character strings to the terminal.
- Sanitization: The image processing logic converts pixel data into a limited set of ASCII characters, which naturally neutralizes any instructions that might be embedded in the source file's binary or metadata.
Audit Metadata