scientific-slides
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The script
generate_slide_image.pyusessubprocess.runto orchestrate the internal AI generation logic contained ingenerate_slide_image_ai.py. This is a standard modular script execution pattern within a skill's own directory. - [COMMAND_EXECUTION]: The
validate_presentation.pyscript invokespdflatexviasubprocess.runto verify the compilation of LaTeX Beamer source files, which is a core feature for academic presentation validation. - [EXTERNAL_DOWNLOADS]: The skill makes network requests to
openrouter.aito access Large Language Models for generating slide images and performing quality reviews. This interaction is central to the skill's AI-assisted slide generation workflow. - [INDIRECT_PROMPT_INJECTION]: The skill accepts user-provided slide descriptions as input for the AI generation prompt. 1. Ingestion points: The
promptparameter ingenerate_slide_image.pyandgenerate_slide_image_ai.pyacts as the entry point for untrusted data. 2. Boundary markers: The script uses structured templates likeFULL_SLIDE_GUIDELINESto encapsulate user input, providing context to the LLM on how to interpret the request. 3. Capability inventory: The skill has file system access and shell execution capabilities used to manage presentation assets and run validation tools. 4. Sanitization: While there is no explicit character escaping, the input is processed by a secondary review LLM to ensure the output meets quality standards. - [CREDENTIALS_UNSAFE]: The documentation and scripts correctly instruct users to manage the
OPENROUTER_API_KEYvia environment variables or.envfiles, following best practices for secret management and avoiding hardcoded credentials.
Audit Metadata