slidev-quick-start
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to download and install packages from the official npm registry. These are well-known tools associated with the Slidev framework.
- Evidence:
npm install @slidev/cli @slidev/theme-defaultandnpm init slidev@latest(SKILL.md). - [COMMAND_EXECUTION]: The skill provides common shell commands for project initialization and development workflows.
- Evidence:
mkdir,cd,touch,npm run dev, andnpx slidevcommands are used to manage project structure and start the local development server (SKILL.md). - [INDIRECT_PROMPT_INJECTION]: The skill defines a process for generating slide content, which constitutes a vulnerability surface if the agent is instructed to incorporate untrusted external data into the slides.
- Ingestion points: Creation of
slides.mdcontent from input data (SKILL.md). - Boundary markers: None present.
- Capability inventory: Local filesystem writes and execution of a local development server via
npm(SKILL.md). - Sanitization: None present.
Audit Metadata