pptx-file-validation
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructions recommend installing the
python-pptxlibrary from the Python Package Index (PyPI), a well-known and standard package registry. - [COMMAND_EXECUTION]: The skill utilizes the
run_shelltool to execute Python code at runtime to inspect presentation structures. This activity is aligned with the skill's primary stated purpose of providing deep file validation. - [INDIRECT_PROMPT_INJECTION]: The skill represents a surface for indirect prompt injection because it ingests and processes content from untrusted PowerPoint (.pptx) files and reflects that content back into the agent's context without sanitization.
- Ingestion points: Reads .pptx files using the
python-pptxlibrary (SKILL.md). - Boundary markers: None present; the extracted slide titles and metadata are printed directly to standard output.
- Capability inventory: The skill has access to the
run_shelltool andpippackage manager. - Sanitization: There is no escaping or filtering of the text extracted from slide shapes or titles before it is processed by the agent.
Audit Metadata