seaslides-html-slides-skill
Pass
Audited by Gen Agent Trust Hub on Aug 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill integrates with established third-party providers for image generation and document conversion, such as OpenAI, Google Gemini, MinerU, Pexels, and Pixabay. These interactions are fundamental to the skill's purpose and follow documented API communication protocols.
- [COMMAND_EXECUTION]: The skill utilizes
subprocess.runto orchestrate a local pipeline of scripts for HTML assembly, rendering, and file format conversion. These executions are confined to the internal toolchain located within the scripts directory. - [REMOTE_CODE_EXECUTION]: Dynamic module loading is implemented in
image_gen.pyandimage_search.pyto handle provider-specific tasks. This mechanism is secured by restricting imports to a predefined, hardcoded registry of local modules, preventing the execution of arbitrary code. - [DATA_EXFILTRATION]: Sensitive API keys for external services are managed securely via environment variables or local
.envconfiguration files. The skill does not attempt to access unauthorized sensitive paths or transmit user data to unverified destinations.
Audit Metadata