wowerpoint
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the
notebooklm-pypackage and the Playwright Chromium browser using theuvtool. Thenotebooklm-pytool is a resource associated with the skill author. Evidence:uv tool install --with playwright --force notebooklm-pyand$(uv tool dir)/notebooklm-py/bin/playwright install chromiuminSKILL.md. - [COMMAND_EXECUTION]: The skill relies on various command-line tools to perform its functions, including
uv,notebooklm,playwright, andjq. Evidence: Multiple shell blocks inSKILL.mddemonstrating the use ofnotebooklm create,notebooklm source add, andnotebooklm generate. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external source documents to generate slide content and titles, creating a surface for indirect instructions. Ingestion points: External document provided at
<doc-path>(referenced inSKILL.md). Boundary markers: None. Capability inventory: Shell command execution (notebooklm), network communication, and document generation. Sanitization: Document metadata is wrapped in double quotes when passed to shell commands, but no further sanitization of shell-active characters (like backticks) is specified. - [DYNAMIC_EXECUTION]: The skill constructs and executes shell commands at runtime by interpolating strings extracted from the source document (e.g., H1 headers or filenames). Evidence:
NOTEBOOK_ID=$(notebooklm create "<title>" --json | jq -r .notebook.id)inSKILL.md, where<title>is derived from the source document.
Audit Metadata