slide-deck-builder
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes multiple shell commands for environment configuration and file processing.
- Installs packages using
npmandpipduring the setup phase. - Uses
pdftoppmfor PDF-to-image conversion and a system-providedsoffice.pyscript for document transformation. - [EXTERNAL_DOWNLOADS]: The skill downloads several well-known and standard libraries from official package registries.
- Fetches Python package
markitdownfor document extraction. - Fetches Node.js packages
pptxgenjs,react,react-dom,react-icons, andsharpfor slide generation and image processing. - [REMOTE_CODE_EXECUTION]: The skill generates and executes a custom JavaScript file (
generate.js) to handle the presentation building logic. - The script uses the
pptxgenjslibrary to programmatically create the slide deck file. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection due to the ingestion of untrusted external content.
- Ingestion points: Text content is extracted from user-supplied PDF and Word documents using the
markitdownutility. - Boundary markers: The instructions do not specify the use of delimiters or 'ignore embedded instructions' warnings when processing extracted text.
- Capability inventory: The environment allows file system writes, shell command execution for quality assurance, and dynamic execution of generated JavaScript code.
- Sanitization: There is no explicit requirement to sanitize or escape the content extracted from external documents before it is used in the slide generation logic.
Audit Metadata