pixel-art

Pass

Audited by Gen Agent Trust Hub on Sep 8, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/pixel_art_video.py invokes the ffmpeg utility using subprocess.run to combine image frames into a video. The call is implemented using a list of arguments and does not use a shell, which prevents command injection vulnerabilities from manipulated file paths.
  • [EXTERNAL_DOWNLOADS]: The skill documentation specifies dependencies on the Pillow Python package and the ffmpeg system utility. These are standard and expected requirements for image and video processing tasks.
  • [SAFE]: The skill includes code and palette data ported from the Synero/pixel-art-studio GitHub repository. This external reference is for attribution purposes and is documented according to best practices.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 8, 2026, 07:01 PM
Security Audit — agent-trust-hub — pixel-art