presentation-builder
Pass
Audited by Gen Agent Trust Hub on Jul 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
slides-grabCLI suite (including commands likebuild-viewer,validate,edit,convert, andpdf) to process and transform slide content within a local workspace. - [EXTERNAL_DOWNLOADS]: The skill instructions reference an external GitHub repository (https://github.com/vkehfdl1/slides-grab) as the source for the required
slides-grabutility. The tool is a prerequisite for the skill's functionality but is not automatically downloaded or installed at runtime by the skill itself. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection through the ingestion of external source materials such as product briefs, documents, and spreadsheets which are converted into slide content.
- Ingestion points: The agent ingests source material (briefs, docs, spreadsheets) as defined in Step 1 and Step 5 of SKILL.md.
- Boundary markers: The instructions lack explicit boundary markers or directives to ignore embedded instructions within the ingested source materials.
- Capability inventory: The skill has file system access (Read/Write/Edit) and the ability to execute the
slides-grabCLI tool. - Sanitization: There is no evidence of sanitization or filtering of the ingested external content before it is interpolated into the slide generation workflow.
Audit Metadata