Skills
Navigate
skills/wulaosiji/founder-skills/deck-web-converter/Gen Agent Trust Hub

deck-web-converter

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes a Python script (scripts/convert_deck.py) to perform the conversion process.
  • The script uses argparse to handle user-provided input and output paths.
  • It utilizes python-pptx and pymupdf for file parsing.- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from .pptx and .pdf files which could potentially contain malicious payloads.
  • Ingestion points: Files are read in scripts/convert_deck.py using Presentation(filepath) and fitz.open(filepath).
  • Boundary markers: The skill does not use specific delimiters for the file content but processes it as binary data.
  • Capability inventory: The skill has file read and write capabilities, and the agent executes code to process the data.
  • Sanitization: The script includes an escape_html function that sanitizes text content (escaping &, <, >, ", and ') before embedding it into the generated HTML output, mitigating Cross-Site Scripting (XSS) risks.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 03:54 AM