making-academic-presentations
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of an external extension for the Gemini CLI and downloads a machine learning model at runtime.
- Extension:
https://github.com/gemini-cli-extensions/nanobananais installed viagemini extensions install. - Model:
hexgrad/Kokoro-82Mis downloaded from HuggingFace whenscripts/batch_tts_kokoro.pyis run. - [COMMAND_EXECUTION]: The skill relies on executing various system-level commands to perform its tasks.
- Terminal Tools: Uses
ffmpegfor video assembly,soffice(LibreOffice) for PDF conversion, andpdftoppmfor image extraction. - Shell Usage: Includes bash commands for file manipulation and conversion in the reference guides.
- [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection because it processes untrusted external data.
- Ingestion points: Research papers and user-provided outlines (defined in
SKILL.mdStage 1). - Boundary markers: Lacks explicit delimiters or instructions to ignore embedded commands within the ingested research papers.
- Capability inventory: Terminal execution access via
run_terminaland the ability to write files (write_file). - Sanitization: No sanitization of the research paper text or user outline is performed before processing.
Audit Metadata