pptx-render
Pass
Audited by Gen Agent Trust Hub on Mar 17, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands using
grepto look up slide numbers in content inventory files. - [DATA_EXPOSURE]: The skill reads local PPTX files and markdown inventory files to extract content. It saves extracted slide images to the
/tmpdirectory for processing. These actions are consistent with the primary purpose of the skill. - [PROMPT_INJECTION]: The skill processes untrusted data from PPTX slides and inventory files. While the current implementation focuses on structured extraction (JSON and image files), there is a surface for indirect prompt injection if the extracted text is subsequently used in a prompt without sanitization.
Audit Metadata