elite-powerpoint-designer
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied markdown files to automatically generate slide decks, which presents a surface for indirect prompt injection attacks where malicious data could influence agent behavior.
- Ingestion points: Untrusted markdown data is ingested via scripts/analyze_content.py and processed by the agent to select brand styles and map slide templates.
- Boundary markers: The skill does not employ explicit delimiters or 'ignore' instructions to separate user-provided content from the agent's operational logic.
- Capability inventory: The skill utilizes the Office-PowerPoint-MCP-Server to perform file operations and generates formatted presentations.
- Sanitization: The provided analysis script uses standard regular expressions for parsing and does not include logic to filter or sanitize potential injection attempts within the markdown content.
- [EXTERNAL_DOWNLOADS]: The skill utilizes an external MCP server to provide its core PowerPoint generation functionality, which is fetched from a well-known package registry.
- Evidence: The README instructs the user to install @gongrzhe/office-powerpoint-mcp-server using the Smithery CLI tool.
Audit Metadata