ppt-rebuild-v15

Pass

Audited by Gen Agent Trust Hub on May 16, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill uses dynamic module loading through importlib.import_module in scripts/run_pipeline.py and scripts/run_deck.py, but this is strictly constrained to a hardcoded TEMPLATE_MAP in classify/template_router.py. This whitelist approach ensures that only authorized local template modules can be imported, preventing arbitrary code execution via user-supplied JSON data.
  • [SAFE]: Asset generation and image processing (cropping and inpainting) are performed locally using the Pillow and opencv-python libraries. These operations are deterministic and do not involve any external network calls or untrusted downloads.
  • [SAFE]: The skill's primary function is to generate .pptx files. All file system operations, such as saving cropped assets or the final PowerPoint presentation, are performed within the output directories specified by the user in the command line arguments. No sensitive directory access (e.g., SSH keys, credentials) was detected.
  • [SAFE]: The provided Node.js script layout/text_measure_browser.js is a standalone utility for estimating font metrics and does not contain any malicious logic or exfiltration patterns.
  • [SAFE]: Metadata in SKILL.md and README.md is consistent with the skill's functionality and does not contain any hidden or deceptive instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
May 16, 2026, 02:19 AM
Security Audit — agent-trust-hub — ppt-rebuild-v15