skills/lovstudio/skills/lov-html2pptx/Gen Agent Trust Hub

lov-html2pptx

Pass

Audited by Gen Agent Trust Hub on Oct 18, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses subprocess.run in scripts/edit_html.py to invoke the internal conversion script scripts/html2pptx.py. This execution is handled securely by passing arguments as a list rather than a shell string, which prevents command injection.
  • [EXTERNAL_DOWNLOADS]: The skill requires the installation of standard Python libraries (playwright, python-pptx) and the Chromium browser binary via the official Playwright installation command. These are legitimate dependencies required for the skill's stated purpose of rendering HTML.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests and renders user-provided HTML content. While this is an ingestion surface for untrusted data, the processing is handled locally by the user and follows standard web rendering practices without exposing the agent to instruction override vulnerabilities.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 18, 2026, 04:28 PM