slides-revealjs

Pass

Audited by Gen Agent Trust Hub on Sep 30, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill templates and documentation reference assets from well-known CDNs, including JSDelivr (jsd.onmicrosoft.cn) and Cloudflare (cdnjs.cloudflare.com). These sources are used to provide standard reveal.js plugins and libraries such as Chart.js, Mermaid, and SVG.js.
  • [INDIRECT_PROMPT_INJECTION]: The skill acts as a surface for processing user-supplied content into slide presentations. * Ingestion points: User-provided text, branding guidelines, and source documents are used to generate the slide deck structure and content. * Boundary markers: The skill includes instructions to 'State your approach first' and 'Analyze the content first', providing a conceptual framework for the AI, though no technical delimiters are enforced in the HTML templates. * Capability inventory: The generated output includes HTML, CSS, and JavaScript, with capabilities for rendering iframes and executing registered plugins for interactive content. * Sanitization: The skill does not explicitly provide sanitization logic for the user-supplied content interpolated into the slide templates.
  • [DYNAMIC_EXECUTION]: The skill documents the use of the reveal.js-plugins animate plugin, which utilizes string-encoded functions within JSON comments to perform runtime SVG manipulations.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 30, 2026, 02:05 AM