marp-slide
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill templates and CSS files in the
assets/directory fetch web fonts from Google Fonts (fonts.googleapis.com) to provide professional typography for the slides. - [INDIRECT_PROMPT_INJECTION]: The skill serves as a surface for processing user-supplied data to populate Markdown and HTML-based slide templates.
- Ingestion points: User prompts containing the content for the requested slides.
- Boundary markers: The instructions do not define specific delimiters for separating user content from the Markdown structure.
- Capability inventory: The skill's primary capability is writing Markdown files to the
/mnt/user-data/outputs/directory. No network exfiltration, dynamic code execution (eval/exec), or shell command execution capabilities are found within the skill's own code or instructions. - Sanitization: No explicit sanitization or escaping mechanisms for user input are described in the guidelines.
Audit Metadata