gamma-core-workflow-a
Pass
Audited by Gen Agent Trust Hub on May 3, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill facilitates communication with the official Gamma API (public-api.gamma.app), which is a well-known service for content generation.
- [EXTERNAL_DOWNLOADS]: The skill references the 'p-limit' Node.js package to manage concurrency when making batch API requests.
- [PROMPT_INJECTION]: The skill processes user-provided content which is subsequently sent to an external API for generation. This represents an indirect prompt injection surface inherent to the tool's primary purpose. 1. Ingestion points: 'content' parameter in gamma.generate calls in SKILL.md. 2. Boundary markers: Absent. 3. Capability inventory: Network writes via Bash (curl/node) to Gamma API. 4. Sanitization: Absent.
Audit Metadata