carousel-generator
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted text, markdown, or JSON input files to generate images. An attacker could potentially embed instructions within the content to influence the agent's behavior during the content preparation phase.
- Ingestion points: The
tools/generate-carousel.pyscript reads user-provided content via theinput_fileargument. - Boundary markers: The skill does not define explicit delimiters or 'ignore' instructions for the content being processed.
- Capability inventory: The skill has file-writing capabilities through the
PIL.Image.savemethod which writes PNG files to the local disk. - Sanitization: The script performs no sanitization of the input text before rendering it onto slides.
Audit Metadata