content-presentation
Pass
Audited by Gen Agent Trust Hub on Jun 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection due to its reliance on external data sources for code generation.
- Ingestion points: The skill reads identity and styling guidelines from the
brand/directory, specificallyBRAND.md,VISUAL.md, andVOICE.mdin the 'Generation Flow' section. - Boundary markers: Absent. The skill does not implement delimiters or instructions to ignore potential commands embedded within the brand files.
- Capability inventory: Across its templates and guides, the skill has the capability to write multiple files (Markdown, HTML, JSON, CSS), execute shell commands via package managers (
npm,npx), and generate network-enabled code (CDN references). - Sanitization: The skill does not describe any validation or filtering of the content read from the brand files before interpolating it into the presentation structure.
- [EXTERNAL_DOWNLOADS]: The skill references and downloads software packages and styling assets from well-known services.
- Fetches the Reveal.js library and highlight plugins from the jsDelivr CDN.
- Imports typography assets from the Google Fonts service.
- Instructs the user to install various frameworks (Slidev, Spectacle, Decktape) via the NPM registry.
- [COMMAND_EXECUTION]: The instructions and framework guides utilize shell commands for project initialization, content serving, and file transformation.
- Uses
npm installandnpm initfor dependency management. - Uses
npxto execute tools likeslidev,serve, anddecktapefor rendering and exporting presentations. - Recommends the use of system utilities like
base64for encoding assets into portable HTML files.
Audit Metadata