ppt-template-creator
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
- [Indirect Prompt Injection Surface]: The process of extracting metadata from user-provided PowerPoint templates creates a surface where embedded data could influence the behavior of the agent using the resulting skill.
- Ingestion points: The skill analyzes user-provided
.pptxand.potxfiles in the analysis workflow defined in Step 2. - Boundary markers: The instructions do not include explicit markers to distinguish between template metadata and agent instructions when generating the new skill.
- Capability inventory: The generated skill includes Python code that performs file system operations to read templates and utilizes the
python-pptxlibrary for presentation generation. - Sanitization: The skill extracts and uses placeholder names and positions directly from the template without additional validation or filtering.
- [External Dependency]: The skill utilizes the
python-pptxlibrary for analyzing slide layouts and manipulating presentation files. This is a standard library for handling PowerPoint documents in Python environments. - [Code Generation]: The skill automates the creation of new skills by generating Python snippets from pre-defined templates. This is a functional pattern used to facilitate the reuse of PowerPoint layouts in automated workflows.
Audit Metadata