report-to-ppt
Pass
Audited by Gen Agent Trust Hub on Apr 28, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted Markdown content, which creates a standard attack surface for indirect prompt injection where instructions could be embedded in the report.
- Ingestion points: The skill reads Markdown files from
/mnt/user-data/outputs/or user-uploaded content using thereadtool. - Boundary markers: No explicit delimiters (e.g., XML tags or triple quotes) or specific instructions are provided to the model to ignore instructions embedded within the processed text.
- Capability inventory: The skill identifies structure and passes parameters to a specialized
ppt-generationtool. It does not possess high-risk capabilities such as arbitrary shell execution, network exfiltration, or persistence. - Sanitization: The instructions do not define sanitization or validation logic for the input Markdown content prior to processing.
Audit Metadata