html-to-pptx
Pass
Audited by Gen Agent Trust Hub on May 31, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses system commands to perform maintenance and verification tasks. Specifically, it runs
fc-cacheon Linux to update font information and utilizessoffice(LibreOffice) to facilitate visual audits by converting presentations to PDF.\n- [EXTERNAL_DOWNLOADS]: The skill downloads font resources from Google Fonts and Google's official GitHub repositories to ensure that the generated presentations maintain their intended typography. These are well-known and trusted sources.\n- [PROMPT_INJECTION]: As a tool designed to process user-provided HTML, the skill inherently handles untrusted data. While an attacker could embed malicious instructions within the HTML content, this is a systemic risk for LLM-based tools processing user inputs and is mitigated by the agent's internal safety guardrails.\n- [SAFE]: The skill optionally modifies the user-level Windows Registry to register fonts, a feature designed to ensure compatibility across different office software. This behavior is clearly disclosed in the skill's instructions.
Audit Metadata