paper-to-slides
Pass
Audited by Gen Agent Trust Hub on Oct 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes local shell commands to perform its primary functions. It invokes a script located at
.tools/mineru-md.shto process PDF files and uses themarpCLI for exporting slide decks to PPTX and PDF formats. These operations are transparently documented as part of the intended workflow. - [INDIRECT_PROMPT_INJECTION]: The agent is instructed to read and process content from external PDF files and their extracted Markdown versions. This represents an attack surface for indirect prompt injection if a malicious PDF were to contain instructions intended for the LLM. However, the risk is mitigated by the skill's specific focus on generating slide content and the use of standard local tools for file generation.
- Ingestion points: PDF files and MinerU-generated Markdown files (
SKILL.md). - Boundary markers: None explicitly specified for prompt interpolation.
- Capability inventory: Shell script execution (
bash .tools/mineru-md.sh), CLI execution (marp), and file writing (SKILL.md). - Sanitization: No explicit sanitization or escaping of the extracted content is mentioned.
Audit Metadata