pptx-import
Pass
Audited by Gen Agent Trust Hub on Aug 31, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data from uploaded
.pptxfiles through theimport_pptxandread_stagetools. - Ingestion points: Content enters the agent's context from PowerPoint slides and speaker notes (referenced in SKILL.md Step 1 and Step 3).
- Boundary markers: No explicit technical delimiters or boundary markers are defined to isolate the imported text from the agent's instructional context.
- Capability inventory: The skill uses powerful tools to modify the environment, including
patch_stage,edit_deck, andgenerate_actions(referenced in Step 3 and Step 4). - Sanitization: While the skill instructs the agent to treat speaker notes as 'drafts' and rewrite them rather than following them verbatim, this is a procedural instruction rather than a technical sanitization or filtering mechanism.
- [DYNAMIC_EXECUTION]: The skill instructs the agent to dynamically load and follow a secondary set of instructions at runtime.
- Evidence: Step 3c explicitly directs the agent to "Load
pro-editingfirst" by reading itsSKILL.mdfrom a variable path and following its internal logic. This creates a dependency on the integrity and safety of the externalpro-editingskill content.
Audit Metadata