report-to-google-slides
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- Local Helper Execution: The skill executes a Python-based helper script (
report_to_google_slides.py) to process the report data. This is part of its core functionality for document conversion. - SVG and CSS Sanitization: The script includes comprehensive logic to sanitize SVG and CSS content, specifically blocking potentially active elements such as
<script>,<iframe>, andon*event handlers to prevent injection vulnerabilities during chart rendering. - Resource Management: The skill utilizes standard project-relative paths for script execution and follows standard protocols for interacting with well-known services like Google Drive for final presentation imports.
- Dependency Handling: It explicitly checks for required libraries like
beautifulsoup4,pillow, andpython-pptx, providing helpful error messages if they are missing from the environment.
Audit Metadata