nanobanan-ppt
Warn
Audited by Gen Agent Trust Hub on Jun 25, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructions direct the agent to download and install its full implementation from an external GitHub repository (
op7418/NanoBanana-PPT-Skills) using thenpx skills addcommand. This source is not from a verified or well-known organization. - [COMMAND_EXECUTION]: The skill provides the agent with shell commands (
grep,[ -e ]) to execute in the local environment to determine if the skill is already installed and to detect its scope (global vs project). - [PROMPT_INJECTION]: The skill processes external documents to generate PowerPoint presentations, creating a surface for indirect prompt injection.
- Ingestion points: Input documents analyzed for content and tone (file: SKILL.md).
- Boundary markers: None present to distinguish document content from agent instructions.
- Capability inventory: File system access for reading documents and writing .pptx files, tool execution for image generation and presentation assembly.
- Sanitization: No sanitization or validation of the input document content is mentioned.
Audit Metadata