open-kimi-ppt
Fail
Audited by Gen Agent Trust Hub on Aug 6, 2026
Risk Level: HIGHCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The script scripts/export_pptx.py automatically executes npm install -g agent-browser@latest if the utility is missing or outdated. This behavior modifies the global system state and typically requires elevated privileges.
- [REMOTE_CODE_EXECUTION]: The skill performs automated runtime installations of third-party packages from public registries. scripts/export_pptx.py installs agent-browser from NPM, while scripts/export_images.py installs pillow and websocket-client from PyPI. These installations fetch and execute remote code without explicit user confirmation.
- [DATA_EXFILTRATION]: During the export process, scripts/export_pptx.py reads local image files, converts them to Base64 data URLs, and passes them through a localhost SDK bridge to an iframe hosted on www.kimi.com. This enables the transmission of local project assets to a remote external service.
- [PROMPT_INJECTION]: The skill processes untrusted data from user-uploaded documents and external URLs to generate presentation content. The lack of explicit boundary markers or sanitization for instructions embedded within these inputs, combined with the skill's capability to execute shell commands, creates a vulnerability to indirect prompt injection.
- [COMMAND_EXECUTION]: The skill uses the subprocess.run method in Python to execute various shell commands, including package managers and the agent-browser CLI.
Recommendations
- AI detected serious security threats
Audit Metadata