soft-blue-gold-business-ppt
Pass
Audited by Gen Agent Trust Hub on Jul 1, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it incorporates untrusted user data into a prompt for a downstream image generation tool.
- Ingestion points: User-provided content for PPT slides is processed and summarized in the SKILL.md workflow.
- Boundary markers: The prompt template uses labels (e.g., '主题：', '主标题：') to structure the content, but lacks formal delimiters or instructions to ignore embedded commands within the user's text.
- Capability inventory: The skill uses the image_gen tool to generate visual content based on the constructed prompt.
- Sanitization: The skill includes negative constraints in the prompt template to steer the AI away from unwanted visual elements, but does not perform active sanitization or escaping of the user-provided text.
Audit Metadata