tg-sticker-pack
Pass
Audited by Gen Agent Trust Hub on Nov 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill accepts user-provided text for sticker captions via command-line arguments in
sticker.py. This text is processed solely for image rendering purposes using the Pillow library and does not interact with the system shell or other sensitive components. - [EXTERNAL_DOWNLOADS]: The skill instructions specify the installation of well-known libraries such as
pillow,rembg, andTelethonfrom the official PyPI registry. Therembgtool also fetches machine learning models from its official project repositories as part of its normal operation. - [COMMAND_EXECUTION]: The documentation provides standard
ffmpegcommand-line examples for frame extraction from video files. These are intended for local manual use by the developer and do not involve automated or hidden execution of untrusted scripts.
Audit Metadata