ppt-keynote
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to convert untrusted external data (markdown/text) into structured HTML presentations, which is a standard surface for indirect prompt injection.
- Ingestion points: The agent processes markdown input files (example.md) to populate the slide template defined in SKILL.md.
- Boundary markers: No specific delimiters or "ignore embedded instructions" warnings are provided in the skill body for handling user input.
- Capability inventory: The skill produces HTML documents containing inline JavaScript for navigation (example.html).
- Sanitization: There are no explicit instructions for sanitizing or escaping the input data before it is interpolated into the HTML structure.
- [SAFE]: The skill fetches styling and typography resources from well-known services, specifically the Tailwind CSS CDN and Google Fonts.
- [SAFE]: The implementation of slide navigation uses a benign, client-side JavaScript listener for arrow keys and spacebar, utilizing
scrollIntoViewwithout any network or sensitive file access.
Audit Metadata