slide-automation
Pass
Audited by Gen Agent Trust Hub on Nov 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data such as research papers and markdown files to generate slides, which is an inherent surface for indirect prompt injection.
- Ingestion points:
SKILL.mdand themarkdown_to_pptxfunction inreferences/detailed-guide.mdingest external markdown and research content. - Boundary markers: No explicit delimiters or instructions to ignore embedded commands are included in the guide's code examples.
- Capability inventory: The skill uses Python libraries (
python-pptx,matplotlib) to write files and provides instructions for running CLI tools likepdflatexandmarp. - Sanitization: Input content is parsed and inserted directly into slide objects without escaping or validation.
- [EXTERNAL_DOWNLOADS]: The guide includes instructions for downloading and installing official tools and libraries from trusted registries, such as
python-pptxfrom PyPI and@marp-team/marp-clifrom NPM. - [COMMAND_EXECUTION]: The documentation provides standard shell commands for compiling presentations, including
pdflatex,latexmk, and the Marp CLI.
Audit Metadata