GifHorse

• Analyzed: May 12, 2026, 3:05 AM
• Findings: 1
• Version: 1.2.0
• Hash: afc3aff2bef8eeaa38c09d44f350995b31eb432dce6f6db5e63fd0d7271780b5
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is designed to install and operate the 'gifhorse' CLI tool for creating reaction GIFs from videos. The `SKILL.md` instructs the AI agent to clone a public GitHub repository (`Coyote-git/gifhorse`) and install it via `pip install -e .` within a virtual environment, along with FFmpeg. All described functionalities, including file system access for video processing, network access for subtitle downloads, and iMessage integration for sending GIFs, are directly aligned with the stated purpose of the skill. There is no evidence of prompt injection, data exfiltration, malicious execution, persistence mechanisms, or obfuscation within the provided files. The installation method, while involving external code, is standard for a CLI tool and does not indicate malicious intent from the skill bundle itself.