powerpoint-deck-design
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided PowerPoint decks, which creates a surface for indirect prompt injection if malicious instructions are embedded within the slides, notes, or metadata.\n
- Ingestion points: Existing PowerPoint presentation files analyzed by the skill (SKILL.md).\n
- Boundary markers: The instructions do not define delimiters to separate untrusted slide content from the agent's core instructions.\n
- Capability inventory: Capability to modify PowerPoint files, export slide images for review, and save changes to the user's system.\n
- Sanitization: The skill does not describe any sanitization or validation of the content ingested from the PowerPoint files.\n- [EXTERNAL_DOWNLOADS]: The skill directs the agent to follow an external guide (https://powerpointmcpserver.dev/reference/deck-builder/) for detailed design instructions. This domain is not a recognized trusted vendor or well-known service, and referencing external sources for instructions can introduce unauthorized behavior at runtime.
Audit Metadata