Presentation Maker

Pass

Audited by Gen Agent Trust Hub on Apr 16, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the user to install standard, well-known libraries from the official NPM registry.
  • Evidence: Recommendations to install pptxgenjs, officegen, and node-pptx via npm install in SKILL.md.
  • [COMMAND_EXECUTION]: The skill uses file system write operations to export generated presentations.
  • Evidence: pptx.writeFile({ fileName: outputPath }) is used in all implementation workflows within SKILL.md.
  • [PROMPT_INJECTION]: An indirect prompt injection surface is present as the skill processes external data without specific sanitization.
  • Ingestion points: The skill accepts content and data objects in SKILL.md to populate slides, charts, and tables.
  • Boundary markers: Absent; there are no delimiters or instructions provided to the agent to ignore potentially malicious instructions embedded in the source data.
  • Capability inventory: File-writing capabilities through pptx.writeFile across all workflows in SKILL.md.
  • Sanitization: Absent; the implementation directly interpolates input data into text fields, speaker notes, and table cells without validation.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 16, 2026, 02:42 AM
Security Audit — agent-trust-hub — Presentation Maker