export-pptx
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands via the Bash tool to perform environment checks, dependency installation, and script execution.
- Evidence includes calls to
which node,npm install, andnode scripts/export-pptx.mjs. - [EXTERNAL_DOWNLOADS]: The skill instructs the agent to install external dependencies from the official NPM registry.
- Fetches well-known packages
pptxgenjsandpuppeteerduring the preflight phase. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted HTML data to extract slide counts and speaker notes, which is a potential surface for indirect instructions.
- Ingestion points: Reads external HTML files (
deck.html) provided as arguments. - Boundary markers: None explicitly defined for the HTML content.
- Capability inventory: Uses
Bashfor shell execution andWritefor file creation. - Sanitization: No specific sanitization or filtering of the HTML input is mentioned.
- [DYNAMIC_EXECUTION]: The skill relies on the creation and execution of a local JavaScript file (
scripts/export-pptx.mjs) to handle the conversion logic. - The prompt specifies that this script must be created if missing before being executed via Node.js.
Audit Metadata