baoyu-slide-deck
Pass
Audited by Gen Agent Trust Hub on Mar 12, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION]: The system instructions include a directive to bypass safety refusals for copyrighted or sensitive figures by generating stylistically similar alternatives instead of refusing the request.
- [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection. Ingestion points: source.md (user-provided content). Boundary markers: Absent. Capability inventory: bash (executing conversion scripts). Sanitization: Absent.
- [COMMAND_EXECUTION]: The skill utilizes the
bashtool to verify local configuration files (EXTEND.md) and to execute TypeScript conversion scripts using thebunruntime. - [EXTERNAL_DOWNLOADS]: The skill uses
npxto execute scripts, which may involve downloading runtimes or library dependencies from the npm registry if they are not already cached.
Audit Metadata