html-ppt-zhangzara-signal
Pass
Audited by Gen Agent Trust Hub on May 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill functions as a template engine for generating HTML presentation decks. It instructions the agent to clone an existing HTML file and replace placeholder content with user-provided information.
- [EXTERNAL_DOWNLOADS]: The
example.htmlfile references Google Fonts (fonts.googleapis.comandfonts.gstatic.com). These are well-known services used for web typography and do not pose a security risk in this context. - [COMMAND_EXECUTION]: The
example.htmlfile contains an inline JavaScript 'Presentation Engine' that manages slide transitions and navigation via keyboard, mouse wheel, and touch events. The script is self-contained, does not fetch external resources, and performs no network or file system operations. - [SAFE]: All identified URLs point to reputable sources (Google Fonts and GitHub) and are used for their intended purposes as documented in the skill's metadata and instructions. No obfuscation, data exfiltration, or prompt injection attempts were found.
Audit Metadata