tw-edu-slides-creator
Pass
Audited by Gen Agent Trust Hub on May 14, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill is designed to ingest and process user-provided teaching materials, such as PDFs, Word documents, and URLs. This creates a potential surface for indirect prompt injection, where malicious instructions hidden within the educational content could attempt to override the agent's behavior. The structured approach of first generating a JSON specification reduces this risk by separating data from instructions.
- [EXTERNAL_DOWNLOADS]: The auxiliary script
scripts/thumbnail.pyidentifies dependencies on well-known Python packagespython-pptxandPillow. These are established libraries for handling PowerPoint files and images. The script provides informative error messages if these are missing rather than attempting unverified or forced installations. - [COMMAND_EXECUTION]: The skill uses a local Python script
scripts/generate_slides.pyto perform its primary function. This script is executed via theBashtool and utilizes the Python standard library to construct the OpenXML structure of a.pptxfile, which is a secure method of file generation compared to invoking external binaries or remote services.
Audit Metadata