presentation

Warn

Audited by Gen Agent Trust Hub on Apr 16, 2026

Risk Level: MEDIUMCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes a shell script at scripts/create-presentation.sh, which in turn invokes the marp command-line utility to transform Markdown into presentation formats.
  • [DATA_EXFILTRATION]: The script scripts/create-presentation.sh accepts a user-provided file path as the $INPUT argument and reads its entire content without validation. This allow an attacker to point the script to sensitive files (e.g., ~/.ssh/config or .env files), which are then incorporated into the presentation workflow.
  • [DATA_EXFILTRATION]: The marp command is executed with the --allow-local-files flag. In the absence of input sanitization, this configuration allows the Markdown engine to access and embed local system resources into the generated PDF, HTML, or PPTX output, facilitating the exfiltration of local data.
  • [DATA_EXFILTRATION]: The script allows the user to specify an arbitrary output path via the $OUTPUT argument. Without proper validation or restricted permissions, this could be used to overwrite existing files on the user's system.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Apr 16, 2026, 05:28 PM
Security Audit — agent-trust-hub — presentation