html-presentations
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for the agent to include Python code blocks in slides that are designed to be run locally using the
uvtool. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied information regarding presentation goals, audience, and content. The navigation JavaScript provided in the template includes sanitization (HTML entity encoding) for slide titles to ensure that user-provided text is rendered safely in the presentation's overview grid.
- [DYNAMIC_EXECUTION]: The skill generates a standalone HTML file that includes embedded JavaScript for keyboard navigation, URL hash persistence, and slide animations. These scripts are generated based on a predefined template and are localized to the output file.
Audit Metadata