The Agent Skills Directory

[SAFE]: The skill provides legitimate functionality for generating GIF animations. Analysis of the Python code in the core/ and templates/ directories confirms the use of standard image processing libraries (Pillow, ImageIO, NumPy).
[PROMPT_INJECTION]: No evidence of prompt injection, jailbreak attempts, or instructions to bypass safety filters was found in SKILL.md or the associated scripts.
[CREDENTIALS_UNSAFE]: No hardcoded API keys, tokens, or credentials were detected. The skill does not request or store sensitive information.
[DATA_EXFILTRATION]: The skill does not perform any network operations to external domains. File access is limited to generating GIF outputs and reading system font files for text rendering, which is standard practice for cross-platform image generation.
[EXTERNAL_DOWNLOADS]: Dependencies listed in requirements.txt (pillow, imageio, imageio-ffmpeg, numpy) are standard, well-known packages from the official Python Package Index (PyPI).
[OBFUSCATION]: No obfuscated code, Base64-encoded payloads, homoglyphs, or hidden Unicode characters were found in any of the analyzed files.
[COMMAND_EXECUTION]: There is no evidence of arbitrary command execution, use of os.system, subprocess, or eval with untrusted input.
[INDIRECT_PROMPT_INJECTION]: While the skill processes user-provided descriptions to generate GIFs, it lacks the dangerous capabilities (such as network access or shell execution) required for an indirect prompt injection attack to pose a significant security risk.

slack-gif-creator