nanobanan-ppt

Warn

Audited by Gen Agent Trust Hub on Jun 25, 2026

Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructions direct the agent to download and install its full implementation from an external GitHub repository (op7418/NanoBanana-PPT-Skills) using the npx skills add command. This source is not from a verified or well-known organization.
  • [COMMAND_EXECUTION]: The skill provides the agent with shell commands (grep, [ -e ]) to execute in the local environment to determine if the skill is already installed and to detect its scope (global vs project).
  • [PROMPT_INJECTION]: The skill processes external documents to generate PowerPoint presentations, creating a surface for indirect prompt injection.
  • Ingestion points: Input documents analyzed for content and tone (file: SKILL.md).
  • Boundary markers: None present to distinguish document content from agent instructions.
  • Capability inventory: File system access for reading documents and writing .pptx files, tool execution for image generation and presentation assembly.
  • Sanitization: No sanitization or validation of the input document content is mentioned.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Jun 25, 2026, 06:33 PM
Security Audit — agent-trust-hub — nanobanan-ppt