frontend-slides

Pass

Audited by Gen Agent Trust Hub on Jul 4, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes platform-specific shell commands to launch the user's default browser to view the generated presentation, including open for macOS, xdg-open for Linux, and start for Windows.
  • [EXTERNAL_DOWNLOADS]: The skill requires the python-pptx package from the official Python Package Index (PyPI) to handle the parsing and conversion of PowerPoint files.
  • [REMOTE_CODE_EXECUTION]: The skill generates and executes local Python scripts using python3 to extract text, notes, and assets from .ppt and .pptx files during the conversion process.
  • [PROMPT_INJECTION]: The skill has an indirect prompt injection surface because it processes untrusted data from PowerPoint files and interpolates it into generated HTML/JS code.
  • Ingestion points: External .ppt and .pptx files are ingested and parsed using the python-pptx library as defined in SKILL.md.
  • Boundary markers: There are no explicit delimiters or boundary markers defined in the instructions to prevent the agent from obeying instructions embedded within the extracted presentation content.
  • Capability inventory: The skill possesses capabilities for local Python execution, file system writes (generating .html files), and shell command execution to open files.
  • Sanitization: The instructions do not include requirements for sanitizing or escaping the text and metadata extracted from the source files before it is included in the final HTML output.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 4, 2026, 07:07 PM