ppt-generator-pro
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The
video_composer.pyscript utilizessubprocess.runto execute FFmpeg for video processing tasks like scaling, padding, and concatenation. This is a core component of the skill's functionality and uses specific, non-shell-injected arguments to ensure safe operation. - [EXTERNAL_DOWNLOADS]: The skill requires standard Python packages (
google-genai,pillow,python-dotenv,requests,PyJWT,anthropic) and the FFmpeg system utility to function. These are downloaded during the installation phase as described in the README andinstall_as_skill.sh. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied documents to generate slide content. While this creates a surface for indirect prompt injection, it is the primary intended use case and relies on standard LLM guardrails for safety during the planning and generation phases.
Audit Metadata