tw-edu-slides-creator

Pass

Audited by Gen Agent Trust Hub on May 14, 2026

Risk Level: SAFE
Full Analysis
  • [PROMPT_INJECTION]: The skill is designed to ingest and process user-provided teaching materials, such as PDFs, Word documents, and URLs. This creates a potential surface for indirect prompt injection, where malicious instructions hidden within the educational content could attempt to override the agent's behavior. The structured approach of first generating a JSON specification reduces this risk by separating data from instructions.
  • [EXTERNAL_DOWNLOADS]: The auxiliary script scripts/thumbnail.py identifies dependencies on well-known Python packages python-pptx and Pillow. These are established libraries for handling PowerPoint files and images. The script provides informative error messages if these are missing rather than attempting unverified or forced installations.
  • [COMMAND_EXECUTION]: The skill uses a local Python script scripts/generate_slides.py to perform its primary function. This script is executed via the Bash tool and utilizes the Python standard library to construct the OpenXML structure of a .pptx file, which is a secure method of file generation compared to invoking external binaries or remote services.
Audit Metadata
Risk Level
SAFE
Analyzed
May 14, 2026, 12:12 PM