ppt
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill repository includes a file named
ppt_audit_result_v2.jsonwhich contains simulated security analysis results, such as 'verdict: safe' and 'security: PASS'. This is a self-referential content pattern intended to influence the judgment of automated security tools or human auditors. - Ingestion points:
ppt_audit_result_v2.jsoncontains static content meant to be read during analysis. - Boundary markers: None.
- Capability inventory: The skill has file-writing capabilities through the
python-pptxlibrary and network fetching capabilities viaurllib. - Sanitization: Not applicable to the static metadata file itself.
- [EXTERNAL_DOWNLOADS]: The converter module contains functionality to fetch images from remote URLs for inclusion in generated slides.
- Evidence: In
framework/converter/components.py, the_fetch_imagefunction usesurllib.request.urlopento download content from a user-providedsrcURL. - [COMMAND_EXECUTION]: The skill provides several entry-point Python scripts (
build_html.py,convert_to_pptx.py,validate_data.py) that perform file system operations and process user-defined JavaScript project files using regular expressions and JSON parsing. - Evidence:
build_html.pyuses regex and file reads to inline CSS and JS;convert_to_pptx.pyinvokes the slide rendering engine to write.pptxfiles to the localoutput/directory.
Audit Metadata