pptx
Pass
Audited by Gen Agent Trust Hub on Jul 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to install the
pptx-clipackage usingpiporuv. This downloads external code from the public PyPI registry to provide the necessary functionality. - [COMMAND_EXECUTION]: The skill relies on the execution of various
pptxsubcommands (e.g.,init,layouts,build,validate) to process user-provided templates and generate PowerPoint files. - [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface as it processes external content from user-provided
.pptxtemplates. - Ingestion points:
pptx init <template.pptx>inSKILL.mdreads a file provided by the user. - Boundary markers: No explicit delimiters are defined to isolate template content from agent instructions during the initialization phase.
- Capability inventory: The skill can read file structures and write new presentation files to the local disk using the
pptxCLI. - Sanitization: The workflow includes defensive measures such as a
--dry-runpreview and apptx validatecommand to verify the integrity and compliance of the generated output against the manifest.
Audit Metadata