easyslides-distill

Pass

Audited by Gen Agent Trust Hub on Oct 24, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill workflow is driven by numerous local Python utilities located in the scripts/ directory. These scripts handle tasks ranging from OOXML graphing (pptx_source_graph.py) to geometric quality assurance (template_geometry_qa.py) and visual diffing (pptx_visual_diff.py). Commands are executed with parameters pointing to user-specified paths and generated template directories.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external PowerPoint (PPTX) documents to extract style and structure, creating a surface for instructions embedded in data to reach the agent.
  • Ingestion points: Raw OOXML source files (path\to\source.pptx) and derived intermediate representations like source_graph.json.
  • Boundary markers: The instructions explicitly mandate the creation of "content-free semantic production family" files, separating the visual language from the source text and data.
  • Capability inventory: The agent can execute a wide array of local scripts, write to the filesystem (templates, reports, SVG/PPTX exports), and generate renderable assets.
  • Sanitization: The skill employs specific "Acceptance Gates" and "Quality Checkers" that validate geometry, text alignment, and cross-material compatibility to ensure the distilled template behaves predictably.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 24, 2026, 05:26 PM