pptx-validation-fallback
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the python-pptx library, recommending installation via pip. This is a well-known, legitimate library for PowerPoint processing and is considered a safe dependency.
- [COMMAND_EXECUTION]: The skill uses run_shell to execute Python scripts for presentation analysis. These scripts are functionally focused on the skill's primary purpose of file validation and do not perform suspicious system operations.
- [PROMPT_INJECTION]: The skill processes untrusted data from PowerPoint files which creates a surface for indirect prompt injection.
- Ingestion points: PowerPoint (.pptx) files processed in SKILL.md via run_shell.
- Boundary markers: None. Extracted content is printed directly to standard output.
- Capability inventory: run_shell for Python execution.
- Sanitization: No content filtering or sanitization is applied to the extracted text.
Audit Metadata