scientific-slides
Pass
Audited by Gen Agent Trust Hub on Aug 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes external commands via the
subprocessmodule to perform legitimate tasks. This includes invoking helper scripts for AI generation and calling LaTeX compilers (likepdflatex) to build presentation PDFs from source templates. - Evidence includes calls in
scripts/generate_schematic.py,scripts/generate_slide_image.py, andscripts/validate_presentation.pyusing secure list-based argument passing. - [EXTERNAL_DOWNLOADS]: The Python scripts
generate_slide_image_ai.pyandgenerate_schematic_ai.pycommunicate with the OpenRouter API (openrouter.ai) to generate and review slide images. This is a well-known service used for the primary purpose of the skill. - [DATA_EXPOSURE]: The skill requires an API key for its AI operations, which it retrieves from environment variables or a
.envfile. It sends user-provided prompts and attached image data to the AI service for processing, which is expected behavior for its stated purpose.
Audit Metadata