course-deck
Pass
Audited by Gen Agent Trust Hub on Jul 25, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to install the
pptxgenjslibrary from the public npm registry (npm install -g pptxgenjs) if it is not already available. This is a standard and well-known dependency for the skill's stated purpose of generating PowerPoint files. - [COMMAND_EXECUTION]: The skill utilizes the
Bashtool to facilitate the installation of software packages and would execute Node.js code to perform its primary function of document generation. - [PROMPT_INJECTION]: The skill is designed to ingest data from external files, which presents a surface for indirect prompt injection (Category 8).
- Ingestion points: Reference files located at
references/courses/tours/and the.workspace-config.jsonfile in the root directory. - Boundary markers: No specific boundary markers or 'ignore' instructions are defined for the content read from these sources.
- Capability inventory: The skill has access to file system operations (Read, Write, Edit, Glob, Grep) and shell command execution (Bash).
- Sanitization: There is no evidence of content sanitization or validation for the text being pulled from the external course references.
Audit Metadata