html-ppt
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDYNAMIC_CONTEXT_INJECTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill serves as a pointer to a full implementation hosted at 'https://github.com/lewislulu/html-ppt-skill'. It provides the agent with commands to download and install this external code via a standard package manager ('npx skills add').
- [DYNAMIC_CONTEXT_INJECTION]: The skill uses the platform's shell execution syntax ('!') to perform environment checks. It runs shell commands to verify the existence of specific files and directories in the local agent environment ('~/.agents/skills/html-ppt/') to determine the installation status. These commands are benign file system checks used for installation logic.
- [INDIRECT_PROMPT_INJECTION]: The skill possesses an attack surface for indirect prompt injection as it is designed to ingest and process external templates and themes to generate presentation files.
- Ingestion points: The skill reads HTML templates, CSS themes, and speaker scripts as specified in the presentation authoring instructions.
- Boundary markers: The instructions do not specify the use of delimiters or warnings to ignore instructions that might be embedded in the presentation content.
- Capability inventory: The skill has the capability to write static HTML and CSS files to the local file system.
- Sanitization: No explicit sanitization or escaping mechanisms for the template or theme content are described in the stub.
Audit Metadata