ai-vibe-slides
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches font resources from Google Fonts (
fonts.googleapis.com). This is a well-known service used to provide typography for the generated slide decks. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user input (presentation outlines and ideas) to populate HTML and React templates. This creates a potential surface for injection if the input contains malicious scripts or tags.
- Ingestion points: User-provided text requests processed in
SKILL.mdto generate content. - Boundary markers: The template provided in the skill does not explicitly use delimiters or guardrails to separate user content from the HTML structure.
- Capability inventory: The skill generates interactive
.htmland.jsxfiles capable of executing JavaScript in a browser context. - Sanitization: There are no instructions in the skill body for the agent to sanitize or escape HTML special characters from the user-provided content before interpolation.
Audit Metadata