pitch-deck-creator-edtech
Warn
Audited by Gen Agent Trust Hub on Mar 13, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
Bashtool to run commands such asnode,npm, andcpfor environment verification and script execution. It attempts to copy a dependency (html2pptx.js) from an absolute local path (/Users/bmcmanus/...) which is specific to the author's local file system and potentially unverifiable in other environments. - [EXTERNAL_DOWNLOADS]: The skill installs the
pptxgenjslibrary from the public npm registry to enable PowerPoint generation capabilities. - [REMOTE_CODE_EXECUTION]: The skill employs dynamic execution by writing a JavaScript file (
create_pitch_deck.js) to the disk and executing it using Node.js to perform the final presentation build. - [PROMPT_INJECTION]: The skill processes untrusted user data from a markdown file without using delimiters or sanitization, creating a surface for indirect prompt injection.
- Ingestion points: User-provided content markdown file used in Phase 1 and Phase 2.
- Boundary markers: No delimiters or 'ignore instructions' warnings are implemented for external data.
- Capability inventory: Shell command execution (bash, node, npm), file system access (read/write), and network access (npm).
- Sanitization: No content validation or escaping is applied to the ingested markdown.
Audit Metadata