slide-deck
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: Uses system commands such as
lsofto detect active development servers and the Vercel CLI for deploying decks. - [EXTERNAL_DOWNLOADS]: Fetches required software including Playwright, python-pptx, and ImageMagick from official registries to support snapshot and conversion functionality.
- [DYNAMIC_EXECUTION]: Generates and executes temporary Python scripts for extracting PowerPoint content and Node.js scripts for browser-based snapshots of rendered decks.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content from PowerPoint files without sanitization or boundary markers, which could allow embedded instructions to influence the agent's code generation.
- Ingestion points: Reads external
.pptxfiles inpptmode via the script inreferences/ppt-conversion.md. - Boundary markers: Absent; there are no specific delimiters or instructions to ignore commands within the extracted slide text.
- Capability inventory: Includes file system writes (
page.tsx), command execution (deployment via Vercel), and dependency installation. - Sanitization: Absent; extracted text is mapped directly into React primitives and code templates without filtering.
- [DATA_EXFILTRATION]: Provides an automated path to upload generated content to Vercel for public hosting, which involves sending local deck data to a remote service.
Audit Metadata