guizang-ppt
Warn
Audited by Gen Agent Trust Hub on Jun 25, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill is a stub designed to download and install its full implementation from a remote repository located at
github.com/op7418/guizang-ppt-skill. - [COMMAND_EXECUTION]: The instructions include shell commands utilizing
npx skills addwith the-yflag to automate the installation of third-party code. This bypasses user confirmation prompts during the installation of remote scripts. - [PROMPT_INJECTION]: The skill processes untrusted user-supplied data, such as raw text and content outlines, to generate presentations. This introduces a surface for indirect prompt injection where instructions embedded in the input data could manipulate the agent's behavior during the PowerPoint generation process.
- Ingestion points: Input content, outlines, or raw text processed by the
guizang-pptcommand as described inSKILL.md. - Boundary markers: No delimiters or protective instructions (e.g., "ignore embedded instructions") are present in the provided files.
- Capability inventory: The skill is designed to generate and save
.pptxfiles to the local file system. - Sanitization: No evidence of input validation, escaping, or sanitization is provided in the installer stub.
Audit Metadata