present
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill's HTML template for reveal.js presentations references CSS and JavaScript files from the jsDelivr CDN. These external assets include Subresource Integrity (SRI) hashes (e.g., integrity='sha384-...') which verify the files have not been modified by a third party before execution.\n- [COMMAND_EXECUTION]: The skill utilizes a local Python script (
references/build_deck.py) to generate PowerPoint presentations. This script implements several security and business logic checks, such as validating JSON input schemas and restricting slide content to plain text to prevent script injection within generated files.\n- [SAFE]: The skill defines clear boundaries for content generation, requiring the use of verified findings from other internal tools rather than inventing new information. No patterns of prompt injection, data exfiltration, or malicious persistence were detected in the instructions or the supporting scripts.
Audit Metadata