pptx
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill enables the extraction and processing of content from external PowerPoint (.pptx) files, creating a potential vector for indirect prompt injection. 1. Ingestion points: Content extraction from .pptx files as described in SKILL.md. 2. Boundary markers: The instructions do not define specific delimiters or directives for the agent to ignore potentially malicious instructions within extracted data. 3. Capability inventory: The skill utilizes python-pptx for file creation, modification, and reading. 4. Sanitization: There are no explicit instructions for the agent to sanitize or filter extracted text before it is incorporated into the conversational context.
- [EXTERNAL_DOWNLOADS]: The skill references a repository hosted on GitHub (github.com/inbharatai/claude-skills) as part of a skill collection. This reference targets the author's own repository and does not involve automated script execution or unverified remote content.
Audit Metadata