pptx-generator
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill parses text from external PPTX files and JSON data to build or modify presentations, which creates a surface for indirect prompt injection. * Ingestion points: Slide text is extracted by analyze-template.ts. * Boundary markers: Extracted content is not isolated with boundary markers. * Capability inventory: The skill can read and write files using Deno scripts. * Sanitization: No sanitization or safety warnings are applied to the processed text.
- [COMMAND_EXECUTION]: The skill instructions involve running shell commands to execute Deno scripts with file access permissions, which is standard for its document processing tasks.
Audit Metadata