lovstudio-any2deck
Pass
Audited by Gen Agent Trust Hub on May 7, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill relies on legitimate, standard dependencies for document and image processing, specifically
pdf-lib@^1.17.1,pptxgenjs@^4.0.1, andsharp@^0.34.5via npm. It also uses thePillowPython library for image compositing. - [COMMAND_EXECUTION]: The automation workflow involves executing local TypeScript and Python scripts using
npxandpython3. These scripts handle the conversion of slide images into final presentation formats and the application of branding logos. - [PROMPT_INJECTION]: The skill ingests untrusted external content (markdown, text, or URLs) to generate outlines and image prompts, creating a surface for indirect prompt injection. It employs structured boundary markers like
STYLE_INSTRUCTIONSandSLIDE CONTENTwithin its templates to manage the interpolation of this data. Capability inventory includes file-writing and image manipulation across its script directory, with no explicit sanitization of the input content documented. - [SAFE]: The skill's operations are consistently scoped to its intended purpose, managing assets within a local
slide-deck/directory and utilizing standard system tools for file management.
Audit Metadata