frontend-slides
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses platform-specific commands such as
open,xdg-open, andstartto launch the generated HTML presentations in the user's default browser. This is an intended convenience feature for the user.\n- [EXTERNAL_DOWNLOADS]: The skill utilizes the standardpython-pptxlibrary for PowerPoint conversion. It includes logic inSKILL.mdto check for its presence and may prompt the user to install it from a package registry if necessary.\n- [PROMPT_INJECTION]: The skill processes user-supplied content and PowerPoint files inSKILL.md, which creates an indirect prompt injection surface. While the skill lacks explicit boundary markers or sanitization for this data, its capabilities are restricted to content extraction and template generation, minimizing the risk of harmful instruction execution.
Audit Metadata