frontend-slides

Pass

Audited by Gen Agent Trust Hub on Apr 4, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses shell scripts (deploy.sh and export-pdf.sh) to perform legitimate deployment and export tasks. These scripts rely on standard Node.js tools like npx vercel and playwright. They involve user-interactive steps (e.g., logging into Vercel) and do not execute arbitrary strings from untrusted sources.
  • [EXTERNAL_DOWNLOADS]: The skill downloads dependencies necessary for its primary functions: python-pptx for PowerPoint extraction via pip, and playwright for PDF rendering via npm. It also fetches fonts from trusted services like Google Fonts and Fontshare. These downloads are documented, purposeful, and target well-known registries.
  • [REMOTE_CODE_EXECUTION]: The PDF export functionality involves running a local Node.js script that uses a headless browser (Chromium) to take screenshots. This is a standard approach for converting dynamic web content to static formats and is implemented using scoped local servers and temporary directories.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 4, 2026, 02:48 PM
Security Audit — agent-trust-hub — frontend-slides