pavlo-marp-presentation
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes
marp-cliandmermaid-clito generate presentations and diagrams. It also usesbrew installto manage these dependencies locally. - [INDIRECT_PROMPT_INJECTION]: The skill reads and processes Markdown (
.md) and Mermaid (.mmd) files, which serves as a potential surface for instructions embedded in data to influence the agent's operations. The analysis identified the following evidence chain: - Ingestion points: Reading existing
.mdfiles indocs/and.mmdfiles (SKILL.md). - Boundary markers: None explicitly defined in instructions.
- Capability inventory: Execution of
marp-cli,mermaid-cli, andbrewcommands via subprocess (SKILL.md). - Sanitization: Standard tool-based rendering without explicit agent-side filtering.
Audit Metadata