presentation-builder

Pass

Audited by Gen Agent Trust Hub on Jul 28, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the slides-grab CLI suite (including commands like build-viewer, validate, edit, convert, and pdf) to process and transform slide content within a local workspace.
  • [EXTERNAL_DOWNLOADS]: The skill instructions reference an external GitHub repository (https://github.com/vkehfdl1/slides-grab) as the source for the required slides-grab utility. The tool is a prerequisite for the skill's functionality but is not automatically downloaded or installed at runtime by the skill itself.
  • [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection through the ingestion of external source materials such as product briefs, documents, and spreadsheets which are converted into slide content.
  • Ingestion points: The agent ingests source material (briefs, docs, spreadsheets) as defined in Step 1 and Step 5 of SKILL.md.
  • Boundary markers: The instructions lack explicit boundary markers or directives to ignore embedded instructions within the ingested source materials.
  • Capability inventory: The skill has file system access (Read/Write/Edit) and the ability to execute the slides-grab CLI tool.
  • Sanitization: There is no evidence of sanitization or filtering of the ingested external content before it is interpolated into the slide generation workflow.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 28, 2026, 01:51 PM
Security Audit — agent-trust-hub — presentation-builder