export-pptx
Pass
Audited by Gen Agent Trust Hub on Apr 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a bash shell to install required Python dependencies and execute a Python script for PowerPoint generation.
- [EXTERNAL_DOWNLOADS]: Installs standard and well-known Python packages ('python-pptx', 'Pillow') from public registries to support its core functionality.
- [PROMPT_INJECTION]: The skill processes content from local Markdown files ('reports/', 'METHODS.md') which serves as an ingestion point for potentially untrusted data. * Ingestion points: Project reports and methodology files (SKILL.md) * Boundary markers: Not explicitly defined in the extraction logic * Capability inventory: Ability to run shell commands for package management and Python execution, and write generated files to the local filesystem * Sanitization: Extraction logic uses regular expressions and header detection but does not explicitly sanitize content against embedded instructions.
Audit Metadata