slides
Pass
Audited by Gen Agent Trust Hub on Apr 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill runs Node.js scripts
check-charts.jsandcheck-overflow.jsto validate HTML structure and layout. These scripts utilize standard libraries like Cheerio and Puppeteer.\n- [EXTERNAL_DOWNLOADS]: Core presentation assets (Reveal.js, Chart.js) are referenced from trusted CDNs including Cloudflare and jsDelivr.\n- [PROMPT_INJECTION]: As an indirect injection surface, the skill converts user-provided markdown into HTML that is rendered in a headless browser for layout validation.\n - Ingestion points: The
slide-outline.mdfile is the primary input.\n - Boundary markers: The skill instructions emphasize following the outline exactly without inventing content.\n
- Capability inventory: Includes file reading, file writing, shell execution for validation, and Puppeteer for rendering.\n
- Sanitization: No explicit sanitization of the input markdown is noted in the conversion process.
Audit Metadata