pptx-generator
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes standard dependencies from official registries, including
pptxgenjs,react-icons, andsharpvia NPM, andmarkitdown(a Microsoft-maintained project) via PyPI. These are well-known libraries and organizations. - [COMMAND_EXECUTION]: The skill execution workflow involves running local Python and Node.js commands to process presentations and compile slide modules. These operations are restricted to the local environment and are necessary for the skill's intended purpose.
- [SAFE]: The skill demonstrates defensive coding practices by explicitly recommending the use of the
defusedxmllibrary for XML manipulation, which protects against XML External Entity (XXE) attacks. - [SAFE]: Dynamic code execution is limited to loading local slide modules generated by the agent itself. The skill also recommends using local temporary directories (
/tmp/) for file operations to avoid issues with volume mounts, which is a common operational best practice.
Audit Metadata