easyslides-distill
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill workflow is driven by numerous local Python utilities located in the
scripts/directory. These scripts handle tasks ranging from OOXML graphing (pptx_source_graph.py) to geometric quality assurance (template_geometry_qa.py) and visual diffing (pptx_visual_diff.py). Commands are executed with parameters pointing to user-specified paths and generated template directories. - [INDIRECT_PROMPT_INJECTION]: The skill processes external PowerPoint (PPTX) documents to extract style and structure, creating a surface for instructions embedded in data to reach the agent.
- Ingestion points: Raw OOXML source files (
path\to\source.pptx) and derived intermediate representations likesource_graph.json. - Boundary markers: The instructions explicitly mandate the creation of "content-free semantic production family" files, separating the visual language from the source text and data.
- Capability inventory: The agent can execute a wide array of local scripts, write to the filesystem (templates, reports, SVG/PPTX exports), and generate renderable assets.
- Sanitization: The skill employs specific "Acceptance Gates" and "Quality Checkers" that validate geometry, text alignment, and cross-material compatibility to ensure the distilled template behaves predictably.
Audit Metadata