pptx-file-validation

Pass

Audited by Gen Agent Trust Hub on Aug 26, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructions recommend installing the python-pptx library from the Python Package Index (PyPI), a well-known and standard package registry.
  • [COMMAND_EXECUTION]: The skill utilizes the run_shell tool to execute Python code at runtime to inspect presentation structures. This activity is aligned with the skill's primary stated purpose of providing deep file validation.
  • [INDIRECT_PROMPT_INJECTION]: The skill represents a surface for indirect prompt injection because it ingests and processes content from untrusted PowerPoint (.pptx) files and reflects that content back into the agent's context without sanitization.
  • Ingestion points: Reads .pptx files using the python-pptx library (SKILL.md).
  • Boundary markers: None present; the extracted slide titles and metadata are printed directly to standard output.
  • Capability inventory: The skill has access to the run_shell tool and pip package manager.
  • Sanitization: There is no escaping or filtering of the text extracted from slide shapes or titles before it is processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 26, 2026, 09:43 AM
Security Audit — agent-trust-hub — pptx-file-validation