academic-slides

Pass

Audited by Gen Agent Trust Hub on Mar 17, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill requires the installation of well-known libraries from official registries (NPM and PyPI), including pptxgenjs, markitdown, and sharp. These are standard dependencies for the automated generation and formatting of presentation files.
  • [COMMAND_EXECUTION]: To facilitate slide creation and quality assurance, the skill utilizes the execute tool to run CLI commands for node, python, and libreoffice. These operations are used to transform research content into .pptx and .pdf formats within the local workspace.
  • [DYNAMIC_EXECUTION]: The workflow involves generating a JavaScript file (generate_slides.js) at runtime, which is then executed to produce the presentation. This is a common programmatic approach for dynamic document creation, though it represents a surface for script execution.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests research artifacts such as story summaries, tables, and figure descriptions from the workspace. While this creates a surface for indirect prompt injection if the source research material is maliciously crafted, the skill utilizes structured templates and clear workflow boundaries to mitigate the risk of unintended agent behavior.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 17, 2026, 03:10 PM