slidespeak
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill relies on a Node.js helper script (
scripts/slidespeak.mjs) executed via theBashtool to perform all presentation tasks. - [EXTERNAL_DOWNLOADS]: The script communicates with the official SlideSpeak API endpoint at
https://api.slidespeak.co. This is the vendor's own infrastructure and is used as intended for the skill's functionality. - [INDIRECT_PROMPT_INJECTION]: The skill provides an interface for processing user-supplied text and uploaded documents.
- Ingestion points: Presentation content can be provided via text strings or contents of documents read from the filesystem.
- Boundary markers: The instructions do not specify any delimiters or safety markers for separating user input from the rest of the generation process.
- Capability inventory: The helper script has the ability to read local files and perform network requests to the SlideSpeak API.
- Sanitization: The skill passes input content directly to the API without client-side sanitization.
Audit Metadata