dashiai-ppt

Warn

Audited by Gen Agent Trust Hub on Jul 17, 2026

Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes multiple Node.js and shell scripts to manage its internal rendering and revision workflows, such as render-goal-deck.jsx, revise-goal.mjs, and check_latest_version.mjs.
  • [COMMAND_EXECUTION]: It launches a local HTTP/HTTPS server (serve-preview-https.mjs) to provide an interactive user interface for editing the generated presentation and to enable PDF/PPTX exports.
  • [REMOTE_CODE_EXECUTION]: The skill uses the esbuild bundler during the rendering process to dynamically compile and minify React UI components into a browser-executable runtime tailored to the specific deck's theme.
  • [REMOTE_CODE_EXECUTION]: In build-theme-style-grid.mjs, the skill is configured to automatically run npm install if required dependencies are missing, which involving executing remote code packages locally.
  • [EXTERNAL_DOWNLOADS]: The ensure-registry.mjs script performs network operations to registry.npmjs.org and registry.npmmirror.com to probe connectivity and configure the skill's package registry settings.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 17, 2026, 03:14 AM
Security Audit — agent-trust-hub — dashiai-ppt