bggg-creator-image2ppt
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/image2pptx.pyutilizessubprocess.runto invoke an external office suite (sofficeorlibreoffice) for PDF generation. This process is deterministic and uses paths restricted to the project output directory. - [INDIRECT_PROMPT_INJECTION]: The skill processes external HTML/SVG files which creates an indirect prompt injection surface. 1. Ingestion points: Untrusted data enters the context via
scripts/html_svg_to_manifest.py. 2. Boundary markers: There are no explicit delimiters or instructions to ignore embedded prompts in the input files. 3. Capability inventory: The skill has file system access and subprocess execution capabilities inscripts/image2pptx.py. 4. Sanitization: Ingested data is processed through standard XML and HTML parsing libraries.
Audit Metadata