deck-refresh

Pass

Audited by Gen Agent Trust Hub on Oct 2, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the agent to install the python-pptx library using pip if it is not already present. This is a standard and well-known Python library used for programmatically creating and editing PowerPoint files.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes data from external sources, specifically uploaded Excel files and existing PowerPoint presentations. This presents a potential surface for indirect prompt injection where malicious content in the files could attempt to influence the agent's behavior.
  • Ingestion points: The skill ingests untrusted data from uploaded Excel (.xlsx) spreadsheets and the contents of PowerPoint (.pptx) decks during Phase 1 and Phase 2.
  • Boundary markers: The skill includes a mandatory human-in-the-loop approval gate in Phase 3, requiring the agent to present all proposed changes for user review before execution.
  • Capability inventory: The agent uses the python-pptx library to modify and write back PowerPoint files based on the processed data.
  • Sanitization: No specific programmatic sanitization is mentioned; however, the requirement for user approval before writing changes serves as the primary mitigation.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 2, 2026, 04:26 PM