slack-gif-creator
“Knowledge and utilities for creating animated GIFs optimized for Slack. Provides constraints, validation tools, and animation concepts. Use when users request animated GIFs for Slack like "make me a GIF of X doing Y for Slack."”
core
aipkg.jsoncore/easing.pycore/frame_composer.pycore/gif_builder.pycore/validators.pyLICENSE.txtREADME.mdrequirements.txtSKILL.md- 01SQP-270%MEDIUM
core/gif_builder.py:160
detailhide
The `save()` method writes a GIF file to disk without requiring explicit user confirmation. While the operation includes logging/print statements (L250-256), there is no confirmation prompt asking the user to approve the write before it occurs. For a skill that modifies the filesystem, explicit confirmation is a best practice.
158 return removed_count159160 def save(161 self,162 output_path: str | Path,fix Add a confirmation prompt before the `imageio.imwrite()` call (L227), such as asking the user to confirm the output path and file size estimate. Alternatively, document this operation prominently in the skill's README with explicit warnings about file writes.
- 02SC1Unpinned Dependencies50%LOW
requirements.txt:1
detailhide
Dependencies lack version pinning, allowing potential malicious package updates. Consider pinning versions.
pillow>=10.0.0 imageio>=2.31.0 imageio-ffmpeg>=0.4.9 numpy>=1.24.0fix Pin all dependency versions in requirements.txt or pyproject.toml. Use exact versions (==) or compatible ranges. Run pip-audit regularly.
- 03SC1Unpinned Dependencies50%LOW
requirements.txt:2
detailhide
Dependencies lack version pinning, allowing potential malicious package updates. Consider pinning versions.
pillow>=10.0.0 imageio>=2.31.0 imageio-ffmpeg>=0.4.9 numpy>=1.24.0fix Pin all dependency versions in requirements.txt or pyproject.toml. Use exact versions (==) or compatible ranges. Run pip-audit regularly.
- 04SC1Unpinned Dependencies50%LOW
requirements.txt:3
detailhide
Dependencies lack version pinning, allowing potential malicious package updates. Consider pinning versions.
pillow>=10.0.0 imageio>=2.31.0 imageio-ffmpeg>=0.4.9 numpy>=1.24.0fix Pin all dependency versions in requirements.txt or pyproject.toml. Use exact versions (==) or compatible ranges. Run pip-audit regularly.
- 05SC1Unpinned Dependencies50%LOW
requirements.txt:4
detailhide
Dependencies lack version pinning, allowing potential malicious package updates. Consider pinning versions.
pillow>=10.0.0 imageio>=2.31.0 imageio-ffmpeg>=0.4.9 numpy>=1.24.0fix Pin all dependency versions in requirements.txt or pyproject.toml. Use exact versions (==) or compatible ranges. Run pip-audit regularly.
- 06SC4Known Vulnerable Dependency: pillow — 10 advisory(ies): CVE-2016-2533 (Pillow buffer overflow in ImagingPcdDecode); CVE-2023-50447 (Arbitrary Code Execution in Pillow); CVE-2021-27922 (Pillow Uncontrolled Resource Consumption) +7 more90%CRITICAL
requirements.txt:1
detailhide
Dependency has known vulnerabilities (CVEs). Using packages with unpatched security flaws exposes the environment to known exploits.
1pillow>=10.0.02imageio>=2.31.03imageio-ffmpeg>=0.4.9fix Update the dependency to a patched version that addresses the known CVE. Check OSV (osv.dev) or NVD for details on the vulnerability.
- 07SC4Known Vulnerable Dependency: numpy — 10 advisory(ies): CVE-2014-1859 (Numpy arbitrary file write via symlink attack); CVE-2021-41495 (NumPy NULL Pointer Dereference); CVE-2021-33430 (NumPy Buffer Overflow (Disputed)) +7 more90%CRITICAL
requirements.txt:4
detailhide
Dependency has known vulnerabilities (CVEs). Using packages with unpatched security flaws exposes the environment to known exploits.
2imageio>=2.31.03imageio-ffmpeg>=0.4.94numpy>=1.24.0fix Update the dependency to a patched version that addresses the known CVE. Check OSV (osv.dev) or NVD for details on the vulnerability.