pixel-art
Pass
Audited by Gen Agent Trust Hub on Jun 21, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/pixel_art_video.pyexecutes theffmpegbinary to encode processed images into video and GIF formats. This is implemented usingsubprocess.runwith a list of arguments and the defaultshell=Falsesetting, which is a secure practice that prevents command injection vulnerabilities. The execution is limited to the necessary functions for the skill's primary purpose. - [EXTERNAL_DOWNLOADS]: The skill documents dependencies on the well-known
PillowPython package and the standardffmpegutility. No unverified third-party scripts or remote payloads are downloaded or executed at runtime. - [DATA_EXFILTRATION]: Analysis of the Python scripts confirms that data operations are restricted to local file reads of source images and local file writes of processed output. No network calls or attempts to access sensitive environment variables, credentials, or system configuration files were found.
- [PROMPT_INJECTION]: The instructions in
SKILL.mddefine a workflow for interacting with users to select art styles and animation scenes. There are no patterns that attempt to override safety guardrails, extract system prompts, or bypass agent constraints.
Audit Metadata