pptx-author

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the python-pptx library from the standard Python Package Index (PyPI) and references documentation from the Anthropic financial-services GitHub repository, which is a trusted source.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external local files which provides a surface for indirect prompt injection. 1. Ingestion points: Reads from ./out/model.xlsx via the openpyxl library and ./templates/firm-template.pptx via python-pptx as described in SKILL.md. 2. Boundary markers: No delimiters or specific instructions are provided to the agent to distinguish between data and potential instructions within the Excel cells. 3. Capability inventory: The skill uses pathlib, python-pptx, and openpyxl to perform local file system read and write operations. 4. Sanitization: There is no evidence of data validation or sanitization for values extracted from the Excel workbook before they are inserted into slide titles or table cells.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 05:47 AM