pixel-art

Pass

Audited by Gen Agent Trust Hub on Jun 20, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/pixel_art_video.py uses subprocess.run to invoke ffmpeg for converting generated image frames into MP4 or GIF files. This is a standard and necessary operation for the skill's stated purpose of animating pixel art. Arguments are passed as a list, which is a best practice to prevent shell injection vulnerabilities.
  • [EXTERNAL_DOWNLOADS]: The skill documents dependencies on Pillow (Python library) and ffmpeg (system binary). These are legitimate, widely-used, industry-standard tools for image and video processing.
  • [SAFE]: No malicious patterns such as credential theft, data exfiltration, or unauthorized remote code execution were detected. All script operations are local and consistent with the skill's stated utility for image processing.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 20, 2026, 11:49 AM
Security Audit — agent-trust-hub — pixel-art