stage

Pass

Audited by Gen Agent Trust Hub on Oct 18, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references official documentation and download pages for presentation tools including Marp (marp.app), reveal.js (revealjs.com), and Slidev (sli.dev). These are well-known services in the web development ecosystem.
  • [COMMAND_EXECUTION]: The instructions suggest using npx @marp-team/marp-cli to preview generated content and npm create hono@latest within technical tutorials. These are legitimate commands used for the skill's primary purpose of slide generation and developer education.
  • [INDIRECT_PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection as it ingests external data (like specifications or learning materials) to generate slide content. This is a characteristic of the tool's intended functionality rather than a specific vulnerability, and no indicators of active exploitation were found.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 18, 2026, 12:45 PM