Presentation Maker
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill implements standard document generation functionality using the
pptxgenjslibrary. The logic is transparent, documented, and aligned with the stated purpose of creating presentation decks. - [INDIRECT_PROMPT_INJECTION]: The skill possesses an attack surface for indirect injection as it processes external data to generate slide content and incorporate images.
- Ingestion points: The JavaScript examples in
SKILL.mdaccept variable input for slide text, chart data, and local image paths. - Boundary markers: No specific delimiters or "ignore instructions" warnings are used when interpolating data into the presentation structure.
- Capability inventory: The skill uses
pptx.writeFilefor file creation andslide.addImagefor file reading/embedding. - Sanitization: Input validation for file paths or content is not explicitly demonstrated in the provided code snippets.
- [EXTERNAL_DOWNLOADS]: The skill documentation correctly identifies and recommends standard, reputable packages from the NPM registry (
pptxgenjs,officegen,node-pptx) to support its functionality.
Audit Metadata