ppt-outline
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill operates by executing a local bash script (scripts/ppt.sh). This is the intended behavior for generating outlines and HTML slide decks.
- [PROMPT_INJECTION]: The skill exhibits a surface for indirect prompt injection by passing user-provided strings directly to shell arguments (e.g., bash scripts/ppt.sh outline "Topic"). This could be exploited if a user provides input containing shell metacharacters. 1. Ingestion points: Topic strings and project names provided by the user in SKILL.md commands. 2. Boundary markers: None; inputs are directly placed in command arguments. 3. Capability inventory: Local script execution (bash). 4. Sanitization: No sanitization is documented in the skill instructions.
Audit Metadata