google-slides
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes content from existing presentations and replaces template placeholders, which represents a potential surface for indirect prompt injection if the source documents contain maliciously crafted instructions.
- Ingestion points: The
get_presentationaction retrieves full details of slide content, andsearch_presentationsreturns metadata from the Google Slides environment. - Boundary markers: No specific delimiters or 'ignore embedded instructions' warnings are included for handling data returned from the Slides API.
- Capability inventory: The skill possesses wide-ranging modification capabilities including
batch_update,delete_object, andadd_image(which fetches remote content), and it communicates with the vendor's official API. - Sanitization: The instructions do not define specific sanitization or escaping protocols for data retrieved from slide elements before it is processed by the agent.
Audit Metadata