frontend-slides
Pass
Audited by Gen Agent Trust Hub on Apr 4, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell scripts (
deploy.shandexport-pdf.sh) to perform legitimate deployment and export tasks. These scripts rely on standard Node.js tools likenpx vercelandplaywright. They involve user-interactive steps (e.g., logging into Vercel) and do not execute arbitrary strings from untrusted sources. - [EXTERNAL_DOWNLOADS]: The skill downloads dependencies necessary for its primary functions:
python-pptxfor PowerPoint extraction via pip, andplaywrightfor PDF rendering via npm. It also fetches fonts from trusted services like Google Fonts and Fontshare. These downloads are documented, purposeful, and target well-known registries. - [REMOTE_CODE_EXECUTION]: The PDF export functionality involves running a local Node.js script that uses a headless browser (Chromium) to take screenshots. This is a standard approach for converting dynamic web content to static formats and is implemented using scoped local servers and temporary directories.
Audit Metadata