pptx-from-layouts
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill employs
subprocess.runto coordinate its multi-stage pipeline. It executes internal Python scripts (such asingest.py,generate_pptx.py, andquality_check.py) and interacts with established system tools likesoffice(LibreOffice) for PDF generation andpdftoppmfor creating slide thumbnails. These actions are standard for the tool's documented functionality and do not represent a security risk. - [INDIRECT_PROMPT_INJECTION]: The skill acts as a parser for user-provided markdown outlines and PowerPoint templates. While this ingestion of untrusted data is a potential surface for indirect injection, the skill treats the content as data to be transformed into slide elements (text, tables, images) rather than executable instructions for the AI agent itself.
Audit Metadata