ppt-template-creator

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
  • [Indirect Prompt Injection Surface]: The process of extracting metadata from user-provided PowerPoint templates creates a surface where embedded data could influence the behavior of the agent using the resulting skill.
  • Ingestion points: The skill analyzes user-provided .pptx and .potx files in the analysis workflow defined in Step 2.
  • Boundary markers: The instructions do not include explicit markers to distinguish between template metadata and agent instructions when generating the new skill.
  • Capability inventory: The generated skill includes Python code that performs file system operations to read templates and utilizes the python-pptx library for presentation generation.
  • Sanitization: The skill extracts and uses placeholder names and positions directly from the template without additional validation or filtering.
  • [External Dependency]: The skill utilizes the python-pptx library for analyzing slide layouts and manipulating presentation files. This is a standard library for handling PowerPoint documents in Python environments.
  • [Code Generation]: The skill automates the creation of new skills by generating Python snippets from pre-defined templates. This is a functional pattern used to facilitate the reuse of PowerPoint layouts in automated workflows.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 05:12 PM
Security Audit — agent-trust-hub — ppt-template-creator