ppt-generator-pro

Pass

Audited by Gen Agent Trust Hub on Sep 13, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The video_composer.py script utilizes subprocess.run to execute FFmpeg for video processing tasks like scaling, padding, and concatenation. This is a core component of the skill's functionality and uses specific, non-shell-injected arguments to ensure safe operation.
  • [EXTERNAL_DOWNLOADS]: The skill requires standard Python packages (google-genai, pillow, python-dotenv, requests, PyJWT, anthropic) and the FFmpeg system utility to function. These are downloaded during the installation phase as described in the README and install_as_skill.sh.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied documents to generate slide content. While this creates a surface for indirect prompt injection, it is the primary intended use case and relies on standard LLM guardrails for safety during the planning and generation phases.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 13, 2026, 05:57 AM
Security Audit — agent-trust-hub — ppt-generator-pro