html-to-ppt-marp
Pass
Audited by Gen Agent Trust Hub on Mar 31, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The Python code provided in
SKILL.mdusessubprocess.runto execute themarpCLI tool. While it uses a list of arguments to mitigate shell injection, it establishes a pattern where the agent executes system commands based on input data.\n- [PROMPT_INJECTION]: The skill acts as a surface for indirect prompt injection by ingesting untrusted data (such as slide titles, points, and Markdown content) and interpolating it into templates without sanitization.\n - Ingestion points: External data enters the agent context via the
create_presentationandmarkdown_to_pptxfunction parameters inSKILL.md.\n - Boundary markers: No delimiters or 'ignore embedded instructions' markers are used when interpolating user data into the Markdown structure.\n
- Capability inventory: The skill scripts utilize
tempfilefor writing data to disk andsubprocess.runto execute external tools on that data.\n - Sanitization: There is no evidence of escaping or validation performed on the input strings before they are combined into the Markdown file.
Audit Metadata