slack-gif-creator
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides functionality to process untrusted data from users which can serve as an injection surface.\n
- Ingestion points: The skill is designed to handle user-uploaded images (referenced in SKILL.md) and user-specified text strings (processed via
draw_textincore/frame_composer.py).\n - Boundary markers: No explicit boundary markers or instructions to ignore embedded commands within user data are provided in the skill instructions.\n
- Capability inventory: The skill has the capability to write files to the disk using
imageio.imwriteincore/gif_builder.py.\n - Sanitization: No sanitization or validation logic is present to filter malicious instructions from image metadata or text inputs.\n- [DYNAMIC_EXECUTION]: The skill facilitates the generation and execution of Python scripts by the agent to create GIFs.\n
- Evidence: SKILL.md provides code templates and outlines a workflow where the agent writes and executes scripts using the provided
corelibrary and thePILpackage. This is a low-severity finding as it is the core intended purpose of the skill and uses local templates.
Audit Metadata