slide-forge
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill specifies a restricted output directory and requires filename normalization (rejecting '..' or leading slashes) to prevent directory traversal attacks during file creation.
- [SAFE]: The instructions mandate a 'self-contained' HTML format, requiring all images to be embedded as base64 and prohibiting external JS, CSS, or font libraries, which mitigates risks of data leakage to external servers.
- [SAFE]: The skill references an external tool by the same author ('github.com/minicoohei/slide-forge') but clarifies its separate purpose to prevent implementation confusion, representing a legitimate vendor resource usage.
Audit Metadata