deck-studio
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill manages the installation of slide production toolchains using well-known package managers. It provides commands for
brew install marp-cli,brew install pandoc,brew install tectonic,npm i -g @marp-team/marp-cli, andpip3 install python-pptx. Additionally, thetectonicLaTeX engine is noted to download necessary packages from the network during its initial execution. These downloads are associated with official repositories and well-known developer tools.\n- [COMMAND_EXECUTION]: Therenderer_agentis designed to execute shell commands to build, verify, and open slide deck files. These includemarp,pandoc,tectonic, and macOS system utilities likeopen(to display artifacts) andmdls(to verify page counts). The use of these commands is consistent with the skill's utility and is clearly documented for the user.\n- [REMOTE_CODE_EXECUTION]: Thefigure_maker_agentgenerates Python, Mermaid, and TikZ scripts which are executed at runtime to render figures. This dynamic execution (e.g.,python3 figures/src/W<N>_fig<k>.py) is a core feature for creating reproducible, theme-aligned graphics from data and descriptions provided by the professor.\n- [PROMPT_INJECTION]: The skill processes untrusted input in the form of lecture notes and slide outlines, presenting a surface for indirect prompt injection.\n - Ingestion points: Lecture notes and slide outlines provided by the user (or sourced from a
lesson-builderskill) serve as the primary input.\n - Boundary markers: The skill employs structured markdown templates and HTML comment directives (e.g., Marp directives) to maintain separation between instructions and content.\n
- Capability inventory: The skill possesses file system write access and the ability to execute shell commands and Python scripts for rendering purposes.\n
- Sanitization: Content is mapped into predefined templates like
templates/deck_source_template.md, which provides structural isolation for the processed text.
Audit Metadata