presentation-talk-track-builder

Pass

Audited by Gen Agent Trust Hub on Aug 30, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • Command Execution: The skill runs a bundled Python helper script (scripts/pptx_talk_track.py) to parse and update PowerPoint files. This script is designed to run locally using standard libraries, which is a safe approach for file manipulation.
  • Indirect Prompt Injection: Since the skill ingests content from external files and notes, there is a theoretical surface area for instructions within those files to influence behavior. The skill mitigates this by focusing on text generation and requiring user confirmation for file saves. * Ingestion points: PowerPoint documents, slide images, and text-based outlines provided by the user. * Boundary markers: The instructions emphasize that speaker notes are the primary source of truth, though they do not use specific delimiters for the ingested text. * Capability inventory: The skill can read file contents and write speaker notes to a new PowerPoint file using the provided script. * Sanitization: Content is processed by the model for script generation, with explicit guardrails provided to the agent regarding confidential or sensitive information markings.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 30, 2026, 11:56 PM
Security Audit — agent-trust-hub — presentation-talk-track-builder