slidespeak-editor
Pass
Audited by Gen Agent Trust Hub on Mar 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues detected. The skill performs legitimate operations for editing PowerPoint documents via a third-party API.
- [EXTERNAL_DOWNLOADS]: The skill's helper scripts utilize the well-known
python-pptxlibrary to handle PowerPoint file operations. This is standard and appropriate for the skill's functionality. - [DATA_EXFILTRATION]: The skill is designed to interact with the SlideSpeak API at
api.slidespeak.cofor processing presentation files. This network communication is documented and essential to the skill's primary purpose. The documentation follows security best practices by recommending the use of environment variables for API key management. - [INDIRECT_PROMPT_INJECTION]: The skill processes external content (text replacements) for PowerPoint shapes. While this represents a data ingestion surface, the risk is inherent to document editing tasks and the skill provides validation scripts (
validate_config.py) to check content constraints.
Audit Metadata