slidev-quick-start

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the user to download and install packages from the official npm registry. These are well-known tools associated with the Slidev framework.
  • Evidence: npm install @slidev/cli @slidev/theme-default and npm init slidev@latest (SKILL.md).
  • [COMMAND_EXECUTION]: The skill provides common shell commands for project initialization and development workflows.
  • Evidence: mkdir, cd, touch, npm run dev, and npx slidev commands are used to manage project structure and start the local development server (SKILL.md).
  • [INDIRECT_PROMPT_INJECTION]: The skill defines a process for generating slide content, which constitutes a vulnerability surface if the agent is instructed to incorporate untrusted external data into the slides.
  • Ingestion points: Creation of slides.md content from input data (SKILL.md).
  • Boundary markers: None present.
  • Capability inventory: Local filesystem writes and execution of a local development server via npm (SKILL.md).
  • Sanitization: None present.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 08:37 PM
Security Audit — agent-trust-hub — slidev-quick-start