skills/thomasrohde/pptx-cli/pptx/Gen Agent Trust Hub

pptx

Pass

Audited by Gen Agent Trust Hub on Jul 14, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the agent to install the pptx-cli package using pip or uv. This downloads external code from the public PyPI registry to provide the necessary functionality.
  • [COMMAND_EXECUTION]: The skill relies on the execution of various pptx subcommands (e.g., init, layouts, build, validate) to process user-provided templates and generate PowerPoint files.
  • [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface as it processes external content from user-provided .pptx templates.
  • Ingestion points: pptx init <template.pptx> in SKILL.md reads a file provided by the user.
  • Boundary markers: No explicit delimiters are defined to isolate template content from agent instructions during the initialization phase.
  • Capability inventory: The skill can read file structures and write new presentation files to the local disk using the pptx CLI.
  • Sanitization: The workflow includes defensive measures such as a --dry-run preview and a pptx validate command to verify the integrity and compliance of the generated output against the manifest.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 14, 2026, 05:59 PM
Security Audit — agent-trust-hub — pptx