The Agent Skills Directory

[SAFE]: The skill functions as a wrapper for the 2slides API. All external communication is restricted to the legitimate service domain (2slides.com) over HTTPS.
[SAFE]: Sensitive data management follows best practices. The API key is retrieved from the SLIDES_2SLIDES_API_KEY environment variable, avoiding hardcoded secrets or exposure in logs.
[SAFE]: The scripts/download_slides_pages_voices.py file includes proactive security measures. It uses a safe_user_path function to prevent path traversal attacks by ensuring output files remain within the current workspace. Additionally, it implements validate_public_https_url and download_pinned_https to verify IP addresses and enforce secure TLS connections, protecting against SSRF and redirection attacks.
[SAFE]: While the skill processes user-supplied content (Category 8
Indirect Prompt Injection), the risk is addressed through programmatic sanitization in scripts and the fact that execution occurs on the vendor's remote infrastructure rather than the local system.
[SAFE]: The skill explicitly warns users about billable actions and credit costs associated with the 2slides service, ensuring informed consent before spending user resources.

2slides-ppt-generator