lecture-deck

Pass

Audited by Gen Agent Trust Hub on Oct 1, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/render.py utilizes subprocess.run to execute a Chromium-based browser binary (such as Chrome, Edge, or Playwright's Chromium). This is a core functionality used to take screenshots of HTML slides and generate PNG contact sheets for review.
  • [DYNAMIC_EXECUTION]: In scripts/build_deck.py, the skill uses importlib.import_module to load slide definitions from user-specified Python modules defined in the deck.json configuration file. This allows for modular deck construction where users can define their own slide content in separate scripts.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process user-provided storyboard files (storyboard.md) and Python modules (screens.py). This ingestion is the primary purpose of the tool, enabling the agent to transform structural requirements into a final presentation deck. The skill includes a dedicated checker (scripts/check_text.py) to audit the generated text for stylistic and structural consistency.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 1, 2026, 07:14 AM