gamma-core-workflow-a

Pass

Audited by Gen Agent Trust Hub on Mar 11, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No malicious patterns, obfuscation, or unauthorized access attempts were detected in the skill code.
  • [DATA_EXFILTRATION]: The skill reads local file content using fs.readFile to provide data for presentation generation on the Gamma platform. This is a primary function of the skill and uses the official API endpoint.
  • [PROMPT_INJECTION]: The skill establishes an attack surface for indirect prompt injection by ingesting untrusted file content and structured data.
  • Ingestion points: The generateFromDocument function in SKILL.md reads content from a provided file path.
  • Boundary markers: Absent.
  • Capability inventory: fs.readFile in SKILL.md and network communication via @gamma/sdk in SKILL.md.
  • Sanitization: Absent.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 11, 2026, 03:58 PM