lov-html2pptx
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
subprocess.runinscripts/edit_html.pyto invoke the internal conversion scriptscripts/html2pptx.py. This execution is handled securely by passing arguments as a list rather than a shell string, which prevents command injection. - [EXTERNAL_DOWNLOADS]: The skill requires the installation of standard Python libraries (
playwright,python-pptx) and the Chromium browser binary via the official Playwright installation command. These are legitimate dependencies required for the skill's stated purpose of rendering HTML. - [INDIRECT_PROMPT_INJECTION]: The skill ingests and renders user-provided HTML content. While this is an ingestion surface for untrusted data, the processing is handled locally by the user and follows standard web rendering practices without exposing the agent to instruction override vulnerabilities.
Audit Metadata