wps-ppt-speaker-notes

Pass

Audited by Gen Agent Trust Hub on Jun 27, 2026

Risk Level: SAFE
Full Analysis
  • [PROMPT_INJECTION]: The skill processes untrusted content from user-provided PowerPoint files to generate speaker notes. This creates a surface for indirect prompt injection where data within a slide could attempt to influence the agent's behavior.
  • Ingestion points: SKILL.md implements logic to read slide titles and text frames using the python-pptx library.
  • Boundary markers: None are explicitly defined in the provided instructions to separate slide content from generation prompts.
  • Capability inventory: The skill utilizes the Bash, Read, Write, and Edit tools to perform file operations and run Python scripts.
  • Sanitization: There is no evidence of text sanitization or filtering applied to the slide content before it is passed to the AI for processing.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 27, 2026, 06:23 AM