gamma-deploy-integration
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructions include installing the Vercel CLI from the official npm registry to facilitate cloud deployment tasks.\n- [INDIRECT_PROMPT_INJECTION]: The AWS Lambda deployment example contains a code pattern that processes external event data without adequate security boundaries.\n
- Ingestion points: The lambda/gamma-handler.ts script ingests event.title and event.prompt directly from the Lambda event object.\n
- Boundary markers: There are no delimiters or explicit instructions provided to the Gamma SDK to distinguish between user data and system instructions.\n
- Capability inventory: The handler invokes client.presentations.create, a tool that generates content based on the provided inputs.\n
- Sanitization: The example code lacks input validation, escaping, or filtering for the external event fields before they are passed to the SDK.
Audit Metadata