lovstudio-any2deck

Pass

Audited by Gen Agent Trust Hub on May 7, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill relies on legitimate, standard dependencies for document and image processing, specifically pdf-lib@^1.17.1, pptxgenjs@^4.0.1, and sharp@^0.34.5 via npm. It also uses the Pillow Python library for image compositing.
  • [COMMAND_EXECUTION]: The automation workflow involves executing local TypeScript and Python scripts using npx and python3. These scripts handle the conversion of slide images into final presentation formats and the application of branding logos.
  • [PROMPT_INJECTION]: The skill ingests untrusted external content (markdown, text, or URLs) to generate outlines and image prompts, creating a surface for indirect prompt injection. It employs structured boundary markers like STYLE_INSTRUCTIONS and SLIDE CONTENT within its templates to manage the interpolation of this data. Capability inventory includes file-writing and image manipulation across its script directory, with no explicit sanitization of the input content documented.
  • [SAFE]: The skill's operations are consistently scoped to its intended purpose, managing assets within a local slide-deck/ directory and utilizing standard system tools for file management.
Audit Metadata
Risk Level
SAFE
Analyzed
May 7, 2026, 09:42 AM