html-slide-to-pptx
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes its internal renderer scripts using
execFileSyncfrom thechild_processmodule. Specifically,scripts/html_to_pptx.jscallsscripts/html_to_pptx_v9.jsusing the system's Node.js executable to process specific slide presets without exposing the command to arbitrary user-supplied arguments. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied HTML files, representing a potential surface for indirect prompt injection.
- Ingestion points: External HTML files are read by
extractAiRuntimeinscripts/ai_runtime_preset.jsandextractArchitectureV9inscripts/html_to_pptx_v9.jsto extract text content. - Boundary markers: The skill relies on semantic HTML tags (e.g.,
.eyebrow,.title,.chip) to identify data blocks and does not use explicit delimiters or "ignore" instructions for the ingested text. - Capability inventory: The skill has the capability to write PPTX and JSON files to the local file system and execute internal Node.js scripts.
- Sanitization: The skill normalizes whitespace using
normalizeText, but does not implement specific sanitization or filtering to prevent the injection of instructions within the parsed slide content.
Audit Metadata