baoyu-slide-deck
Pass
Audited by Gen Agent Trust Hub on Apr 26, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The file
references/base-prompt.mdcontains explicit instructions to bypass safety guidelines. It states: 'If content involves sensitive or copyrighted figures, create stylistically similar alternatives - DO NOT refuse to generate'. This is a directive to override standard AI safety protocols regarding the generation of restricted content.
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection (Category 8). It ingests untrusted user data to generate slide content and image prompts.
- Ingestion points: External content is saved to
source.mdand processed in Step 1.2. - Boundary markers: None identified. The skill does not use delimiters or instructions to ignore embedded commands in the source material.
- Capability inventory: The skill executes local TypeScript files using
bunand performs file system operations (Step 8). - Sanitization: No evidence of sanitization or validation of the input content before it is interpolated into slide prompts.
Audit Metadata