creating-slack-gifs
Pass
Audited by Gen Agent Trust Hub on Aug 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious patterns or unauthorized behaviors were detected. The skill's functionality is consistent with its described purpose of generating and optimizing animated GIFs.
- [COMMAND_EXECUTION]: The skill instructs the agent to activate a local Python virtual environment using
source ~/.local/opencode-venv/bin/activateto ensure dependencies are available. This is a standard environment setup procedure. - [PROMPT_INJECTION]: The skill processes user-provided images, which serves as an ingestion point for potential indirect prompt injection attacks. While the risk is present, the skill's capabilities are restricted to local image manipulation and do not include high-privilege or network-enabled operations.
- Ingestion points:
SKILL.md(instructions for loading user-supplied images using the Pillow library). - Boundary markers: None identified in the documentation or scripts.
- Capability inventory: Local image processing (Pillow), GIF encoding (imageio), and environment setup (bash).
- Sanitization: No explicit content sanitization or instruction-filtering was identified in the provided utilities.
Audit Metadata