guizang-ppt-skill
Pass
Audited by Gen Agent Trust Hub on Nov 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [DYNAMIC_EXECUTION]: The skill employs several dynamic code execution patterns:
- The script
scripts/validate-presenter-mode.mjsuses thenode:vmmodule'srunInNewContextfunction to parse and evaluate theSPEAKER_NOTESarray from the HTML files it validates. - The script
scripts/validate-swiss-deck.mjsusescreateRequireand dynamicimport()to locate and load theplaywrightlibrary from computed file system paths. - The
assets/template.htmlfile uses dynamicimport()to load the Motion One library, falling back to a CDN if the local copy is unavailable. - [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to ingest external user content (outlines, data, article links) and interpolate it into HTML templates. This creates a standard injection surface where instructions embedded in the source materials could influence the agent's behavior during the generation process.
- [COMMAND_EXECUTION]: The
SKILL.mdinstructions guide the agent to perform update checks and repository synchronization usinggit fetchandgit pullcommands within the skill's root directory, although it explicitly requires user confirmation. - [EXTERNAL_DOWNLOADS]: The generated presentations and templates reference resources from well-known services, including fonts from Google Fonts (
fonts.googleapis.com), icons from Lucide (unpkg.com), mapping components from MapLibre (unpkg.com), and animation libraries fromjsdelivr.net.
Audit Metadata