ppt-master
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill generates HTML files that fetch CSS and JavaScript assets from well-known service providers including Cloudflare (cdnjs) and jsDelivr. These resources are required for the Reveal.js framework and Font Awesome icons to function properly in the final output.
- [DYNAMIC_EXECUTION]: The skill's primary functionality involves generating HTML and JavaScript code. It uses predefined templates and programmatically assembles them with user content to create an interactive presentation web page.
- [INDIRECT_PROMPT_INJECTION]: The skill possesses a data ingestion surface as it processes untrusted user-supplied text for slide content.
- Ingestion points: User themes and presentation content are ingested in the initial planning phase.
- Boundary markers: The skill does not explicitly define delimiters or instructions for the agent to escape user content when placing it inside HTML tags.
- Capability inventory: The skill uses file-writing capabilities to save the final generated presentation to the local filesystem.
- Sanitization: There are no explicit sanitization instructions for the agent to filter or escape HTML special characters in the user's content.
Audit Metadata