wps-courseware
Pass
Audited by Gen Agent Trust Hub on Jun 24, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a Python script that generates .pptx files using the
python-pptxlibrary. This script handles the automated creation and formatting of presentation slides based on lesson information. - [EXTERNAL_DOWNLOADS]: The skill's Python code depends on the
python-pptxpackage, which is a well-known and standard library for generating PowerPoint documents. - [PROMPT_INJECTION]: The skill processes untrusted user input to generate presentation content, which creates a surface for indirect prompt injection.
- Ingestion points: User-provided subject, grade, and lesson content supplied via command arguments.
- Boundary markers: None; user data is interpolated directly into document string templates.
- Capability inventory: Python script execution and file-writing capabilities.
- Sanitization: No escaping or validation is performed on the user-supplied strings before they are included in the generated file.
Audit Metadata