guizang-ppt
Warn
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructions facilitate the installation of external code from a third-party GitHub repository (op7418/guizang-ppt-skill) using the npx skills add command.
- [REMOTE_CODE_EXECUTION]: The installation process involves executing community-contributed code. The command npx skills add ... -y is used, which automatically confirms the installation and execution of the remote skill content.
- [INDIRECT_PROMPT_INJECTION]: The primary function of the skill is to process user-provided articles, outlines, and Markdown files into HTML presentations, which represents a potential attack surface for indirect prompt injection.
- Ingestion points: Markdown files, outlines, and article text (SKILL.md)
- Boundary markers: None specified in the instructions
- Capability inventory: File system access to write HTML output; browser-based execution for previews
- Sanitization: Not specified in this catalogue stub
Audit Metadata