lecture-deck
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/render.pyutilizessubprocess.runto execute a Chromium-based browser binary (such as Chrome, Edge, or Playwright's Chromium). This is a core functionality used to take screenshots of HTML slides and generate PNG contact sheets for review. - [DYNAMIC_EXECUTION]: In
scripts/build_deck.py, the skill usesimportlib.import_moduleto load slide definitions from user-specified Python modules defined in thedeck.jsonconfiguration file. This allows for modular deck construction where users can define their own slide content in separate scripts. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process user-provided storyboard files (
storyboard.md) and Python modules (screens.py). This ingestion is the primary purpose of the tool, enabling the agent to transform structural requirements into a final presentation deck. The skill includes a dedicated checker (scripts/check_text.py) to audit the generated text for stylistic and structural consistency.
Audit Metadata