paw-tools-presentation
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted marketing data or raw text to generate slide content, which presents a potential surface for indirect prompt injection. \n
- Ingestion points: Processes data from marketing skill outputs and raw user-provided text as described in
references/01-ingest.md. \n - Boundary markers: There are no explicit delimiters or instructions to treat ingested content as data rather than instructions. \n
- Capability inventory: The skill possesses the ability to write HTML files to the local file system and perform network requests to external image APIs. \n
- Sanitization: While basic filename sanitization is performed, there is no evidence of HTML sanitization for the content inserted into presentation templates.
Audit Metadata