deck-open-slide-canvas
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references Tailwind CSS from
cdn.tailwindcss.comand typography from Google Fonts (fonts.googleapis.com). These are established, well-known services used for standard web development purposes. - [INDIRECT_PROMPT_INJECTION]: The skill functions as a template that transforms user-provided content into formatted HTML slides. While this creates a data ingestion surface, the skill is limited to content rendering without dangerous execution capabilities.
- Ingestion points: User content provided via prompt is interpolated into the HTML template.
- Boundary markers: No specific delimiters or "ignore instructions" warnings are defined for the user content.
- Capability inventory: The skill is restricted to generating HTML content; no subprocess execution, sensitive file access, or unauthorized network operations were found.
- Sanitization: There are no explicit instructions for sanitizing or escaping user-provided text during the transformation process.
- [SAFE]: The skill does not contain any malicious patterns such as credential harvesting, command execution, or obfuscation. Its instructions are focused on visual design constraints, typography, and layout rules for 1920x1080 canvas presentations.
Audit Metadata