slide-automation

Pass

Audited by Gen Agent Trust Hub on Nov 5, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data such as research papers and markdown files to generate slides, which is an inherent surface for indirect prompt injection.
  • Ingestion points: SKILL.md and the markdown_to_pptx function in references/detailed-guide.md ingest external markdown and research content.
  • Boundary markers: No explicit delimiters or instructions to ignore embedded commands are included in the guide's code examples.
  • Capability inventory: The skill uses Python libraries (python-pptx, matplotlib) to write files and provides instructions for running CLI tools like pdflatex and marp.
  • Sanitization: Input content is parsed and inserted directly into slide objects without escaping or validation.
  • [EXTERNAL_DOWNLOADS]: The guide includes instructions for downloading and installing official tools and libraries from trusted registries, such as python-pptx from PyPI and @marp-team/marp-cli from NPM.
  • [COMMAND_EXECUTION]: The documentation provides standard shell commands for compiling presentations, including pdflatex, latexmk, and the Marp CLI.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 5, 2026, 03:08 PM