pptx-translator
Pass
Audited by Gen Agent Trust Hub on May 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No high-severity security issues were detected. The skill performs its stated function using standard Python libraries and local file processing.- [EXTERNAL_DOWNLOADS]: The skill installs the python-pptx library from the official Python Package Index (PyPI) if it is not found on the system. PyPI is a well-known and trusted package registry.- [COMMAND_EXECUTION]: The skill executes Python scripts to perform data extraction and write-back operations on PowerPoint files. These operations are essential to its functionality and do not involve executing untrusted code or commands.- [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection as it processes text from external .pptx files and passes it to translation sub-agents.
- Ingestion points: Text extracted from .pptx slides in SKILL.md (Step 2).
- Boundary markers: None present in the sub-agent prompts (SlideClassifier, SlideTranslator).
- Capability inventory: Python script execution via python3 (Steps 0, 2, 4, 5) and external package installation via pip (Step 0).
- Sanitization: User-provided output filenames are sanitized in Step 1.5; however, there is no explicit sanitization or escaping of the text content extracted from slides before it is interpolated into sub-agent prompts.
Audit Metadata