pptx-author
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the python-pptx library from the standard Python Package Index (PyPI) and references documentation from the Anthropic financial-services GitHub repository, which is a trusted source.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external local files which provides a surface for indirect prompt injection. 1. Ingestion points: Reads from ./out/model.xlsx via the openpyxl library and ./templates/firm-template.pptx via python-pptx as described in SKILL.md. 2. Boundary markers: No delimiters or specific instructions are provided to the agent to distinguish between data and potential instructions within the Excel cells. 3. Capability inventory: The skill uses pathlib, python-pptx, and openpyxl to perform local file system read and write operations. 4. Sanitization: There is no evidence of data validation or sanitization for values extracted from the Excel workbook before they are inserted into slide titles or table cells.
Audit Metadata