mindmap-ppt-builder
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Clones the repository 'https://github.com/agegr/mindmap-ppt' from GitHub to the local workspace. This repository is maintained by the skill author and contains the necessary presentation framework.
- [COMMAND_EXECUTION]: Executes 'git clone' to set up the project environment and 'npm run check' or 'npm run dev' for content validation and local previewing. These commands are scoped to the project subfolder.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted user text to generate the 'project/source.js' file. It implements appropriate safeguards for this attack surface.
- Ingestion points: Processes text provided directly in the conversation or from local files specified by the user.
- Boundary markers: Explicitly instructs the agent to escape backticks and '${...}' template literal sequences to prevent code injection in the generated JavaScript file.
- Capability inventory: The skill possesses shell command execution ('git', 'npm') and file system write capabilities.
- Sanitization: Requires the agent to sanitize user-derived content before incorporating it into the project's source code.
Audit Metadata