slides-edit
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill executes
uvx --from agent-slides slidesacross multiple steps. This pattern dynamically pulls and runs an unversioned package from a public registry at runtime, creating a risk if the package name is targeted or compromised. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user presentation files, exposing it to potential indirect injection attacks. The required analysis components are:
- Ingestion points: External files such as
output.pptxare loaded and scanned within the project directory. - Boundary markers: Absent; the instructions do not establish explicit boundaries or ignore rules for text retrieved from slides.
- Capability inventory: The skill possesses file-writing capabilities and can run CLI tools via
uvxto execute modifications. - Sanitization: Absent; text fields and search queries from the slides are processed directly without sanitization or escaping mechanisms.
Audit Metadata