scientific-slides
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use the
Bashtool to execute a suite of local Python scripts, includinggenerate_slide_image.pyfor slide creation,slides_to_pdf.pyfor assembly, andvalidate_presentation.pyfor quality checks. These are standard functional components of the skill's workflow. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external, potentially untrusted data by attaching user-provided figures and charts (e.g., from
figures/orresults/directories) to AI generation prompts using the--attachflag. This creates a surface where instructions embedded in image metadata or text within images could influence the model's output. - Ingestion points: Visual data and research figures read from the local workspace (e.g.,
figures/*.png,results/*.jpg). - Boundary markers: The documentation does not specify explicit boundary markers or "ignore" instructions to separate attached visual content from the generation prompt.
- Capability inventory: The skill has access to
Bashfor script execution,Readfor data ingestion, andWritefor generating presentation files. - Sanitization: No explicit sanitization or filtering of the content within the attached images is mentioned.
- [EXTERNAL_DOWNLOADS]: The skill facilitates communication with the OpenRouter API (
openrouter.ai), a well-known service, to perform the core AI-driven slide generation tasks.
Audit Metadata