stage
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references official documentation and download pages for presentation tools including Marp (marp.app), reveal.js (revealjs.com), and Slidev (sli.dev). These are well-known services in the web development ecosystem.
- [COMMAND_EXECUTION]: The instructions suggest using
npx @marp-team/marp-clito preview generated content andnpm create hono@latestwithin technical tutorials. These are legitimate commands used for the skill's primary purpose of slide generation and developer education. - [INDIRECT_PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection as it ingests external data (like specifications or learning materials) to generate slide content. This is a characteristic of the tool's intended functionality rather than a specific vulnerability, and no indicators of active exploitation were found.
Audit Metadata