gif-sticker-maker
Pass
Audited by Gen Agent Trust Hub on Mar 27, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/convert_mp4_to_gif.pyinvokes theffmpegsystem utility usingsubprocess.run. The implementation is secure as it passes arguments as a structured list, avoiding shell interpolation and preventing command injection vulnerabilities. - [DATA_EXFILTRATION]: The skill transmits image data and text prompts to the vendor's official API endpoints (
api.minimax.io). This behavior is consistent with the skill's primary function and follows standard industry practices for AI-integrated creative tools. - [CREDENTIALS_UNSAFE]: The skill requires a
MINIMAX_API_KEY, which it correctly instructs the user to provide via an environment variable. No hardcoded credentials or unsafe secret management practices were found.
Audit Metadata