pptx-from-layouts

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill employs subprocess.run to coordinate its multi-stage pipeline. It executes internal Python scripts (such as ingest.py, generate_pptx.py, and quality_check.py) and interacts with established system tools like soffice (LibreOffice) for PDF generation and pdftoppm for creating slide thumbnails. These actions are standard for the tool's documented functionality and do not represent a security risk.
  • [INDIRECT_PROMPT_INJECTION]: The skill acts as a parser for user-provided markdown outlines and PowerPoint templates. While this ingestion of untrusted data is a potential surface for indirect injection, the skill treats the content as data to be transformed into slide elements (text, tables, images) rather than executable instructions for the AI agent itself.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 12:30 AM