export-as-pptx-screenshots
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes HTML slide decks, which are untrusted external data sources. It uses the
gen_pptxtool which has the capability to execute JavaScript via theshowJsparameter. This represents a potential surface for indirect injection if a malicious deck contains instructions designed to influence the agent's behavior during the export process. - Ingestion points: HTML slide decks (SKILL.md).
- Boundary markers: None specified in the instructions.
- Capability inventory:
gen_pptxtool (file system write, screenshotting), JavaScript execution viashowJsparameter. - Sanitization: Not mentioned.
- [DYNAMIC_EXECUTION]: The skill instructs the agent to generate and provide JavaScript strings (e.g.,
goToSlide(0)ordocument.querySelector('deck-stage').goTo(N)) to thegen_pptxtool for execution. While these are intended for slide navigation, they represent the dynamic assembly and execution of code at runtime. - [NO_CODE]: The skill does not bundle any external scripts or binary executables, relying instead on instructions for existing agent tools.
Audit Metadata