skills/agentskillexchange/skills/Design, render, and visually QA editable PowerPoint decks with PPT Design Skill/Gen Agent Trust Hub
Design, render, and visually QA editable PowerPoint decks with PPT Design Skill
Warn
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONMETADATA_POISONING
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructions require cloning a repository from an unverified source (https://github.com/sunchaokun/PPT-Design-Skill) to obtain the necessary installation and runtime scripts.
- [COMMAND_EXECUTION]: The installation process involves executing arbitrary Python scripts (
installer/install.pyandskill/scripts/check_runtime.py) which could perform unauthorized system modifications or network operations. - [METADATA_POISONING]: The skill's YAML frontmatter contains a field
verification: "security_reviewed". This is a self-asserted claim that cannot be verified and may mislead users into a false sense of security. - [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to process a "confirmed brief" provided by the user or an external source, which represents a potential attack surface for indirect prompt injection.
- Ingestion points: Input presentation briefs (SKILL.md description).
- Boundary markers: None documented in the skill instructions.
- Capability inventory: Writes editable .pptx files and renders .png images to the local filesystem.
- Sanitization: No evidence of input validation or sanitization for the provided briefs.
Audit Metadata