slide-maker

Pass

Audited by Gen Agent Trust Hub on Oct 17, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: scripts/check_version.py connects to raw.githubusercontent.com to check for available updates. This is a common and safe practice for tool maintenance.
  • [COMMAND_EXECUTION]: Several scripts, including scripts/deck_cycle.py and scripts/check_version.py, use subprocess.run to execute git commands and internal Python scripts. These calls are used for automation and environment verification.
  • [DYNAMIC_EXECUTION]: The skill uses importlib and __import__ to load project-specific style modules (style.py) and independently authored deck sections. This allows for a modular and extensible design.
  • [SAFE]: The tool includes a robust HTML sanitization mechanism in scripts/archetypes_html.py that strips executable elements (scripts, iframes) and event handlers from user-contributed motif markup, preventing potential injection attacks in the generated previews.
  • [SAFE]: Instructions for sub-agents (e.g., agents/blind-reader.md) emphasize looking only at rendered images and ignoring potentially biasing file records, establishing clear operational boundaries.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 17, 2026, 01:53 PM