pptx-translator
Pass
Audited by Gen Agent Trust Hub on May 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill automatically installs the 'python-pptx' library from PyPI during its initialization phase using 'pip install --user'. This is a well-known library required for PowerPoint file manipulation.
- [COMMAND_EXECUTION]: The skill executes multiple Python scripts to handle document processing. This includes extracting text from slide objects, recursively traversing grouped shapes, and writing back translated content into the .pptx structure, including direct XML modifications for SmartArt components.
- [PROMPT_INJECTION]: The skill processes untrusted content from user-provided PowerPoint files, which creates an indirect prompt injection surface when this content is passed to sub-agents for classification and translation.
- Ingestion points: Slide text and speaker notes extracted from .pptx files in SKILL.md.
- Boundary markers: Absent; slide content is interpolated into sub-agent prompts (SlideClassifier and SlideTranslator) without explicit delimiters or instructions to ignore embedded commands.
- Capability inventory: The skill has filesystem write access via the 'python-pptx' library and initiates sub-agent tasks for complex text processing.
- Sanitization: No sanitization or filtering is applied to the extracted slide content before it is processed by the AI models.
Audit Metadata