pptx-generator

Pass

Audited by Gen Agent Trust Hub on Aug 1, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill utilizes standard dependencies from official registries, including pptxgenjs, react-icons, and sharp via NPM, and markitdown (a Microsoft-maintained project) via PyPI. These are well-known libraries and organizations.
  • [COMMAND_EXECUTION]: The skill execution workflow involves running local Python and Node.js commands to process presentations and compile slide modules. These operations are restricted to the local environment and are necessary for the skill's intended purpose.
  • [SAFE]: The skill demonstrates defensive coding practices by explicitly recommending the use of the defusedxml library for XML manipulation, which protects against XML External Entity (XXE) attacks.
  • [SAFE]: Dynamic code execution is limited to loading local slide modules generated by the agent itself. The skill also recommends using local temporary directories (/tmp/) for file operations to avoid issues with volume mounts, which is a common operational best practice.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 1, 2026, 01:30 PM