academic-presentations
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads the
nanobananaextension fromhttps://github.com/gemini-cli-extensions/nanobananaand an AI model fromhexgrad/Kokoro-82Mon HuggingFace to enable image editing and offline TTS capabilities. - [COMMAND_EXECUTION]: Executes several system-level commands including
ffmpegfor video assembly,soffice(LibreOffice) for PPTX to PDF conversion, andpdftoppmfor image extraction from PDF files. - [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: Research papers and user outlines are used as the primary data sources for drafting video scripts and slide content in Stage 1.
- Boundary markers: The skill documentation notes that the "human drives all outline and visual decisions," but there are no technical delimiters or "ignore" instructions provided to the agent for processing untrusted paper content.
- Capability inventory: The agent has the ability to execute shell commands (
ffmpeg,soffice,pdftoppm) and network operations via TTS providers. - Sanitization: There is no evidence of sanitization or filtering of the research paper text before it is interpolated into the generation scripts.
- [DYNAMIC_EXECUTION]: Performs runtime installation of CLI extensions using
gemini extensions installand dynamically loads large model weights from HuggingFace via thekokorolibrary.
Audit Metadata