slidev-cli-skilld
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [NO_CODE]: The skill consists entirely of instructional Markdown files. It does not package or execute any scripts, binaries, or automated setup routines.
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the creation and modification of Markdown decks, which creates a potential surface for instructions embedded in processed data.
- Ingestion points: Markdown files (e.g.,
slides.md) and imported snippets or slides (references/syntax.md). - Boundary markers: The Slidev format utilizes
---separators for slides and HTML comments for notes, providing structural delimitation (SKILL.md). - Capability inventory: The skill documents CLI commands for serving content, building static apps, and an MCP server for deck manipulation (
references/cli.md,references/mcp.md). - Sanitization: The skill relies on Slidev's internal rendering engine (Vite/Vue); no explicit sanitization or filtering instructions for untrusted input are provided in the skill.
- [EXTERNAL_DOWNLOADS]: The documentation references external resources for extended functionality, such as the PlantUML rendering server and a third-party Docker image for deployment (
references/config.md,references/exporting.md).
Audit Metadata