ppt-rebuild-v15
Pass
Audited by Gen Agent Trust Hub on May 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses dynamic module loading through
importlib.import_moduleinscripts/run_pipeline.pyandscripts/run_deck.py, but this is strictly constrained to a hardcodedTEMPLATE_MAPinclassify/template_router.py. This whitelist approach ensures that only authorized local template modules can be imported, preventing arbitrary code execution via user-supplied JSON data. - [SAFE]: Asset generation and image processing (cropping and inpainting) are performed locally using the
Pillowandopencv-pythonlibraries. These operations are deterministic and do not involve any external network calls or untrusted downloads. - [SAFE]: The skill's primary function is to generate
.pptxfiles. All file system operations, such as saving cropped assets or the final PowerPoint presentation, are performed within the output directories specified by the user in the command line arguments. No sensitive directory access (e.g., SSH keys, credentials) was detected. - [SAFE]: The provided Node.js script
layout/text_measure_browser.jsis a standalone utility for estimating font metrics and does not contain any malicious logic or exfiltration patterns. - [SAFE]: Metadata in
SKILL.mdandREADME.mdis consistent with the skill's functionality and does not contain any hidden or deceptive instructions.
Audit Metadata