presenterm
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [DYNAMIC_EXECUTION]: The skill documents the use of
+execand+exec_replaceattributes within markdown code blocks, which allow for the execution of shell commands when the presentation is loaded or a key is pressed. These features are documented as opt-in, requiring specific command-line flags or configuration changes to function. - [INDIRECT_PROMPT_INJECTION]: The skill describes a process for handling external markdown files that could contain embedded commands intended for execution.
- Ingestion points: Markdown files processed by the
presentermtool as described inSKILL.md. - Boundary markers: No specific boundary markers or sanitization requirements are defined for the markdown slide content.
- Capability inventory: Shell command execution via the
presentermCLI as described in the code block attributes section. - Sanitization: The tool defaults to disabled execution, requiring explicit user consent via the
-xor-Xflags, or theenable_snippet_executionconfiguration setting. - [COMMAND_EXECUTION]: The documentation includes examples of shell commands used to run presentations, export them to PDF, and manage Kubernetes resources via
kubectlwithin code blocks. - [EXTERNAL_DOWNLOADS]: The instructions suggest installing several well-known external tools and libraries for diagram rendering, including
@mermaid-js/mermaid-clifrom npm,d2,typst, andpandoc.
Audit Metadata