orca-ppt
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill includes a utility script (
scripts/fetch-fonts.mjs) that downloads font files from Google Fonts. These are well-known and trusted services used solely to ensure consistent rendering without relying on public CDN imports at runtime. - [COMMAND_EXECUTION]: The skill instructs the agent to run local verification and recording scripts (
scripts/check-deck.mjsandscripts/capture.mjs). These scripts use Playwright to audit HTML layouts and FFmpeg for video assembly. All operations are local to the generated content and serve functional purposes. - [INDIRECT_PROMPT_INJECTION]: The skill generates UI content based on user instructions. While any UI generation tool has a surface for the agent to produce unexpected HTML, this skill provides structured templates and strict visual validation logic which helps maintain the integrity of the output.
- [DYNAMIC_EXECUTION]: Animations are handled via the industry-standard GSAP library. The execution is confined to DOM manipulation for transitions and does not involve executing arbitrary user-supplied code strings.
Audit Metadata