azure-update-customer-pptx
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The toolkit relies on PowerShell and Python scripts to automate PowerPoint generation. These scripts perform standard file operations (e.g., in
Initialize-AzureUpdateWorkspace.ps1) and interface with Microsoft PowerPoint via COM automation (e.g., inBuild-CustomerPptx.ps1andEnrich-CustomerPptx.ps1). These operations are transparent, local, and essential to the skill's primary function. - [INDIRECT_PROMPT_INJECTION]: The skill ingests external data from Azure Updates and Microsoft Learn MCP tools. To mitigate the risk of processing potentially adversarial content, the toolkit includes mandatory human-in-the-loop validation steps, a rubber-duck review process, and automated verification scripts (
Verify-Pptx.ps1) that check for placeholders and content quality before final deck delivery. - [DYNAMIC_EXECUTION]: The
Invoke-PythonPptxBuild.ps1script uses a small, hardcoded Python snippet to perform a dependency check within the local virtual environment. This is a functional requirement for verifying that libraries likepython-pptxandpypdfare correctly installed and does not incorporate untrusted input.
Audit Metadata