slide-deck
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill's primary function is to generate and execute Python code at runtime to create binary .pptx files. This is the intended behavior of the skill.
- [COMMAND_EXECUTION]: The skill requires the execution of generated scripts within the environment to produce the final document.
- [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface for indirect injection as it processes untrusted user data (briefs, outlines, or notes) and incorporates them into the logic of a generated script.
- Ingestion points: The skill accepts an 'outline, doc, or notes' provided by the user in SKILL.md.
- Boundary markers: No explicit delimiters or instructions are provided to the agent to treat the input as untrusted data.
- Capability inventory: The skill can generate and run Python code and write files to the local system.
- Sanitization: No specific sanitization or escaping of the user content is mentioned before it is processed into the script generator.
Audit Metadata