fetch-slides
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
subprocess.runinfetch_slides.pyto execute the LibreOfficesofficebinary for PPTX-to-PDF conversion. The execution uses a list of arguments and does not involve a shell, mitigating command injection risks. - [EXTERNAL_DOWNLOADS]: The skill makes network requests using
httpxandplaywrightto download files or fetch presentation content from user-supplied URLs. - [INDIRECT_PROMPT_INJECTION]: The skill extracts text and links from remote RevealJS presentations and writes them to a markdown file for agent consumption, which is a common vulnerability surface.
- Ingestion points: External HTML content from slide URLs processed in
fetch_slides.py. - Boundary markers: None; extracted text is written directly without delimiters or warnings to the agent.
- Capability inventory: File system writes, command execution via LibreOffice, and arbitrary network operations.
- Sanitization: No sanitization or filtering of the extracted text content is performed before storage.
Audit Metadata