skills/aws-samples/sample-spec-driven-presentation-maker/spec-driven-presentation-maker/Gen Agent Trust Hub
spec-driven-presentation-maker
Pass
Audited by Gen Agent Trust Hub on May 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
subprocess.runwith argument lists to securely invoke system utilities such as LibreOffice (soffice) for document conversion and Poppler (pdftoppm) for rendering slide previews. - [COMMAND_EXECUTION]: Automated scripts utilize
gitfor checkouts of icon repositories andpowershell.exefor environment-specific path resolution in WSL setups. - [EXTERNAL_DOWNLOADS]: The skill fetches official AWS Architecture Icons from verified AWS domains and Material Symbols from a well-known community repository on GitHub.
- [SAFE]: XML processing is hardened using the
defusedxmllibrary to protect against XML External Entity (XXE) and other XML-related exploitation vectors during template analysis. - [SAFE]: Path management includes logic to resolve user-provided paths and prevent basic directory traversal attempts.
Audit Metadata