slack-gif-creator
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or security vulnerabilities were identified in the skill's instructions or core logic.
- [EXTERNAL_DOWNLOADS]: The skill requires standard, well-known Python packages for its functionality, including Pillow, NumPy, and imageio. These are official packages from public registries and are necessary for image manipulation and GIF encoding.
- [DATA_EXFILTRATION]: There is no evidence of network activity, credential harvesting, or access to sensitive local environment files. The skill's operations are confined to in-memory image processing and local file I/O.
- [COMMAND_EXECUTION]: The code does not use any functions that spawn shell processes (e.g., subprocess, os.system) or evaluate arbitrary strings as code (e.g., eval, exec).
- [INDIRECT_PROMPT_INJECTION]: While the skill instructions guide the agent on how to handle user-uploaded images, the underlying code treats these files strictly as binary pixel data using the Pillow library, which prevents execution of any embedded text instructions.
Audit Metadata