frontend-slides
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to install the full version of the code from an external repository located at
https://github.com/zarazhangrui/frontend-slidesusing package managers like npx. - [INDIRECT_PROMPT_INJECTION]: The skill possesses a data ingestion surface by processing PPT and PPTX files provided by the user to convert them into HTML presentations. Maliciously crafted presentation content could attempt to influence the agent's behavior during the processing phase.
- Ingestion points: Reads and parses PPT/PPTX file data through the
extract-pptx.pyscript. - Boundary markers: No specific delimiters or "ignore embedded instructions" warnings are present in the provided installation instructions.
- Capability inventory: The skill executes shell scripts (
deploy.sh,export-pdf.sh) and Python scripts, and performs file system operations to generate output files. - Sanitization: No documentation is provided regarding the sanitization or escaping of text extracted from input presentations before it is processed by the agent.
- [COMMAND_EXECUTION]: The skill relies on executing external scripts and tools, including Python-based extraction scripts and Node.js-based deployment and PDF export tools, which require the agent to spawn subprocesses.
Audit Metadata