create-slide
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from markdown files within the
themes/directory to guide the generation of new slide files. An attacker could provide a malicious theme file containing instructions to override the agent's behavior or generate insecure code. - Ingestion points: The skill reads
themes/<id>.mdend-to-end to extract palette, typography, layout, and component definitions (SKILL.md, Step 1). - Boundary markers: There are no explicit boundary markers or instructions to the agent to treat the content of the theme files as data only or to ignore embedded instructions.
- Capability inventory: The agent has the capability to write new TypeScript/React files (
index.tsx) and plan complex structures based on the input data. - Sanitization: The skill lacks sanitization, filtering, or validation steps for the content retrieved from the external theme files before using it in the prompt for code generation.
Audit Metadata