slides
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute a Python script (
../design-system/scripts/search-slides.py) located in a sibling directory to retrieve copywriting formulas, layouts, and slide strategies. The instructions also note that these scripts interact with project files like brand guidelines and design tokens. - [EXTERNAL_DOWNLOADS]: The HTML slide template in
references/html-template.mdincludes a script tag that loads the Chart.js library from the JSDelivr CDN (https://cdn.jsdelivr.net/npm/chart.js@4.4.1/dist/chart.umd.min.js). This is a standard and safe method for including well-known open-source libraries. Additionally, example layout patterns reference background images from the reputable stock photo service Pexels. - [INDIRECT_PROMPT_INJECTION]: The skill's
createcommand takes user-provided arguments and places them inside a<task>tag within the prompt context. - Ingestion points: User input provided via the
$ARGUMENTSvariable inreferences/create.md. - Boundary markers: The skill uses
<task>tags to separate user-provided instructions from the skill's system instructions. - Capability inventory: The skill can execute local scripts and write HTML files to the project directory.
- Sanitization: There is no explicit sanitization step described for the user-provided arguments before they are processed by the agent.
Audit Metadata