deck-refresh
Pass
Audited by Gen Agent Trust Hub on Apr 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a shell command (
python3 -c "import pptx" 2/dev/null || python3 -m pip install python-pptx) to ensure that the required library is available in the environment. - [EXTERNAL_DOWNLOADS]: The skill downloads the
python-pptxpackage from the official Python Package Index (PyPI). This is a well-known library and its installation is directly related to the skill's stated functionality. - [PROMPT_INJECTION]: The skill processes content from user-uploaded PowerPoint (.pptx) and Excel (.xlsx) files, which introduces an indirect prompt injection surface where malicious instructions in those files could attempt to influence the agent.
- Ingestion points: Processes slide text, table data, and spreadsheet values in Phases 1 and 2 of the workflow.
- Boundary markers: No specific delimiters or markers are defined in the instructions to isolate ingested content from system instructions.
- Capability inventory: The skill uses the
python-pptxlibrary for file manipulation and can execute shell commands for setup. - Sanitization: There is no evidence of sanitization or filtering of the content extracted from the external files before it is processed by the agent.
Audit Metadata