deck-refresh
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to install the
python-pptxlibrary usingpipif it is not already present. This is a standard and well-known Python library used for programmatically creating and editing PowerPoint files. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from external sources, specifically uploaded Excel files and existing PowerPoint presentations. This presents a potential surface for indirect prompt injection where malicious content in the files could attempt to influence the agent's behavior.
- Ingestion points: The skill ingests untrusted data from uploaded Excel (
.xlsx) spreadsheets and the contents of PowerPoint (.pptx) decks during Phase 1 and Phase 2. - Boundary markers: The skill includes a mandatory human-in-the-loop approval gate in Phase 3, requiring the agent to present all proposed changes for user review before execution.
- Capability inventory: The agent uses the
python-pptxlibrary to modify and write back PowerPoint files based on the processed data. - Sanitization: No specific programmatic sanitization is mentioned; however, the requirement for user approval before writing changes serves as the primary mitigation.
Audit Metadata