pitch-deck-to-html
Pass
Audited by Gen Agent Trust Hub on Apr 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions direct the agent to generate and execute a Python script locally to extract content from .pptx or .pdf files and build the HTML presentation.
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of standard third-party Python libraries, specifically python-pptx and pymupdf (fitz), to perform file extraction.
- [SAFE]: The generated HTML output is explicitly designed to be self-contained with no external CDN links or remote dependencies, which prevents potential tracking or external content loading.
- [SAFE]: The Python script implementation uses the html.escape function to sanitize text extracted from source files before embedding it into the HTML template, reducing the risk of stored cross-site scripting (XSS) in the generated document.
Audit Metadata