Loading
heating the forge...
ForgeCat
Docs
Sell Agents
Feedback
@forgecat/anthropics_skills_slack-gif-creator — Security Risk Report | ForgeCat
forgecat
/
forgecat
/
anthropics_skills_slack-gif-creator
/
security
anthropics_skills_slack-gif-creator
Security risk report for
@forgecat/anthropics_skills_slack-gif-creator
v0.0.4
Source Integrity
Low
Profile is attributed to Anthropic with a public GitHub repository link (anthropics/skills).
Metadata includes version, commit hash, and license reference, consistent with legitimate open-source distribution.
Agent Intent
Low
Content is purely educational and technical documentation for GIF creation using PIL and standard libraries.
No instructions to ignore system prompts, read credentials, exfiltrate data, or execute remote payloads.
No guidance poisoning: recommends only well-known, legitimate packages (Pillow, imageio, numpy) and standard PIL primitives.
Details
Evidence
All code examples use standard PIL Image/ImageDraw APIs with no hidden instructions.
Documentation focuses on animation concepts (shake, pulse, bounce, spin, fade, slide, zoom, particle burst) with transparent implementation guidance.
No references to external URLs, credential files, or system commands beyond normal Python execution.
Permissions
Low
No tools or hooks are declared in the profile.
The skill is purely knowledge/documentation; it does not request file system access, shell execution, network calls, or subagent authority.
Any actual GIF creation would be performed by the user's own Python environment using standard libraries.
Details
Evidence
Declared tools section is empty.
No MCP servers or tool definitions present.
Code examples are self-contained Python snippets intended for user execution, not agent-initiated actions.
MCP Risk
Low
No MCP servers are defined in the profile.
No hidden instructions in tool descriptions or arbitrary binary execution.
Profile is a static knowledge/documentation skill with no server-side components.
Details
Evidence
MCP servers section is empty.
Content is markdown documentation and Python code examples only.
Evaluation Details
Status
Completed
Checks completed
4/4
Flagged
0
Evaluated
6/12/2026
ForgeCat