Presentation Maker
Pass
Audited by Gen Agent Trust Hub on Apr 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install standard, well-known libraries from the official NPM registry.
- Evidence: Recommendations to install
pptxgenjs,officegen, andnode-pptxvianpm installinSKILL.md. - [COMMAND_EXECUTION]: The skill uses file system write operations to export generated presentations.
- Evidence:
pptx.writeFile({ fileName: outputPath })is used in all implementation workflows withinSKILL.md. - [PROMPT_INJECTION]: An indirect prompt injection surface is present as the skill processes external data without specific sanitization.
- Ingestion points: The skill accepts
contentanddataobjects inSKILL.mdto populate slides, charts, and tables. - Boundary markers: Absent; there are no delimiters or instructions provided to the agent to ignore potentially malicious instructions embedded in the source data.
- Capability inventory: File-writing capabilities through
pptx.writeFileacross all workflows inSKILL.md. - Sanitization: Absent; the implementation directly interpolates input data into text fields, speaker notes, and table cells without validation.
Audit Metadata