slidev
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a library of reference documentation for the Slidev presentation tool. It covers a wide range of topics including Markdown syntax, CLI commands, animations, and layout configurations.
- [COMMAND_EXECUTION]: The skill documents standard CLI commands such as
pnpm create slidev,slidev build, andslidev export. These are necessary for the intended purpose of managing and presenting slides. - [EXTERNAL_DOWNLOADS]: The documentation references the installation of well-known dependencies such as
playwright-chromiumfor PDF export and@iconify-jsonfor icon support. These are standard packages from trusted ecosystems (Microsoft, Iconify). - [REMOTE_CODE_EXECUTION]: The skill describes Slidev's built-in features for running code snippets during presentations (
monaco-run) and editing files (monaco-write). These are presented as developer-centric features for live coding and are part of the core Slidev functionality. - [DATA_EXFILTRATION]: The skill mentions the
--tunneloption for sharing presentations via Cloudflare Quick Tunnels. This is a documented Slidev feature for remote access and does not represent an unauthorized data exfiltration attempt. - [INDIRECT_PROMPT_INJECTION]: While the skill describes how to process external Markdown files and Vue components (an attack surface for indirect injection), it does so within the context of documenting the tool's intended extensibility and does not include any malicious instructions.
Audit Metadata