ppt-keynote

Pass

Audited by Gen Agent Trust Hub on Sep 28, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to convert untrusted external data (markdown/text) into structured HTML presentations, which is a standard surface for indirect prompt injection.
  • Ingestion points: The agent processes markdown input files (example.md) to populate the slide template defined in SKILL.md.
  • Boundary markers: No specific delimiters or "ignore embedded instructions" warnings are provided in the skill body for handling user input.
  • Capability inventory: The skill produces HTML documents containing inline JavaScript for navigation (example.html).
  • Sanitization: There are no explicit instructions for sanitizing or escaping the input data before it is interpolated into the HTML structure.
  • [SAFE]: The skill fetches styling and typography resources from well-known services, specifically the Tailwind CSS CDN and Google Fonts.
  • [SAFE]: The implementation of slide navigation uses a benign, client-side JavaScript listener for arrow keys and spacebar, utilizing scrollIntoView without any network or sensitive file access.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 28, 2026, 10:38 AM