google-slides
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches and refreshes OAuth tokens from the backend service at google-workspace-extension.geminicli.com during authentication.
- [DATA_EXFILTRATION]: The skill performs network operations to official Google API endpoints (slides.googleapis.com and www.googleapis.com) to manage presentation data, and to google-workspace-extension.geminicli.com for OAuth token management.
- [INDIRECT_PROMPT_INJECTION]: The skill has a vulnerability surface for indirect prompt injection as it processes content from external presentations.
- Ingestion points: The
get-textcommand inscripts/slides.pyextracts all text content from presentation slides, including text boxes and tables. - Boundary markers: The skill does not use specific delimiters or instructions to the agent to distinguish extracted presentation content from system instructions.
- Capability inventory: The skill includes capabilities to perform network requests and modify Google Slides content via the
batch-update,create, andreplace-textcommands. - Sanitization: No sanitization or filtering is applied to the extracted text before it is returned to the agent's context.
Audit Metadata