slide-maker
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]:
scripts/check_version.pyconnects toraw.githubusercontent.comto check for available updates. This is a common and safe practice for tool maintenance. - [COMMAND_EXECUTION]: Several scripts, including
scripts/deck_cycle.pyandscripts/check_version.py, usesubprocess.runto execute git commands and internal Python scripts. These calls are used for automation and environment verification. - [DYNAMIC_EXECUTION]: The skill uses
importliband__import__to load project-specific style modules (style.py) and independently authored deck sections. This allows for a modular and extensible design. - [SAFE]: The tool includes a robust HTML sanitization mechanism in
scripts/archetypes_html.pythat strips executable elements (scripts, iframes) and event handlers from user-contributed motif markup, preventing potential injection attacks in the generated previews. - [SAFE]: Instructions for sub-agents (e.g.,
agents/blind-reader.md) emphasize looking only at rendered images and ignoring potentially biasing file records, establishing clear operational boundaries.
Audit Metadata