mindmap-ppt-builder
Pass
Audited by Gen Agent Trust Hub on May 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill clones a repository from the author's official GitHub account (https://github.com/agegr/mindmap-ppt) to set up the workspace. This is a documented vendor resource.
- [COMMAND_EXECUTION]: The skill uses shell commands to run project-specific scripts (
npm run checkandnpm run dev). These are used to validate the generated mind-map data and provide a preview of the presentation. - [PROMPT_INJECTION]: The skill processes user-provided text or local files. To mitigate risks of indirect injection or script breakage, it specifically instructs the agent to escape backticks and
${...}sequences before inserting user content into the generatedproject/source.jsfile.
Audit Metadata