wps-courseware

Pass

Audited by Gen Agent Trust Hub on Jun 24, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill includes a Python script that generates .pptx files using the python-pptx library. This script handles the automated creation and formatting of presentation slides based on lesson information.
  • [EXTERNAL_DOWNLOADS]: The skill's Python code depends on the python-pptx package, which is a well-known and standard library for generating PowerPoint documents.
  • [PROMPT_INJECTION]: The skill processes untrusted user input to generate presentation content, which creates a surface for indirect prompt injection.
  • Ingestion points: User-provided subject, grade, and lesson content supplied via command arguments.
  • Boundary markers: None; user data is interpolated directly into document string templates.
  • Capability inventory: Python script execution and file-writing capabilities.
  • Sanitization: No escaping or validation is performed on the user-supplied strings before they are included in the generated file.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 24, 2026, 05:49 AM