slideshow
Pass
Audited by Gen Agent Trust Hub on Nov 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use the
hyperframesCLI tool for administrative and development tasks, such asnpx hyperframes skills update,npx hyperframes add, andnpx hyperframes check. These commands are used to maintain skill freshness, add project components, and validate the output against defined schemas. - [EXTERNAL_DOWNLOADS]: The skill references external resources from well-known services, including the
hyperframespackage via the NPM registry and the Three.js library hosted on the JSDelivr CDN. These dependencies are standard for the tool's stated purpose of building interactive web-based presentations. - [INDIRECT_PROMPT_INJECTION]: The skill authors slideshows based on user-provided content, such as pitch deck scripts, storyboards, or existing web pages. While this represents a surface where untrusted input could be reflected in the generated HTML and JSON code, the skill emphasizes structured data islands and built-in validation tools to manage the composition safely.
Audit Metadata