export-pptx

Pass

Audited by Gen Agent Trust Hub on Apr 16, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses a bash shell to install required Python dependencies and execute a Python script for PowerPoint generation.
  • [EXTERNAL_DOWNLOADS]: Installs standard and well-known Python packages ('python-pptx', 'Pillow') from public registries to support its core functionality.
  • [PROMPT_INJECTION]: The skill processes content from local Markdown files ('reports/', 'METHODS.md') which serves as an ingestion point for potentially untrusted data. * Ingestion points: Project reports and methodology files (SKILL.md) * Boundary markers: Not explicitly defined in the extraction logic * Capability inventory: Ability to run shell commands for package management and Python execution, and write generated files to the local filesystem * Sanitization: Extraction logic uses regular expressions and header detection but does not explicitly sanitize content against embedded instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 16, 2026, 08:26 AM