html-slides
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill performs localized build operations including file reading and writing within the workspace to bundle presentation assets into a single HTML file. Visual verification is performed using standard local development tools.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests user-provided text which is then interpolated into an HTML template during the build process. 1. Ingestion points: User-authored content within the template.html file. 2. Boundary markers: Content is localized within the stage div element as defined in the engine template. 3. Capability inventory: The skill uses a local script (assets/build.py) to write the output file and suggests running a local HTTP server for quality assurance. 4. Sanitization: Content is processed and included in the final output without transformation, which is the intended behavior for this document generation tool.
Audit Metadata