gamma-core-workflow-a
Pass
Audited by Gen Agent Trust Hub on Mar 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or unauthorized access attempts were detected in the skill code.
- [DATA_EXFILTRATION]: The skill reads local file content using
fs.readFileto provide data for presentation generation on the Gamma platform. This is a primary function of the skill and uses the official API endpoint. - [PROMPT_INJECTION]: The skill establishes an attack surface for indirect prompt injection by ingesting untrusted file content and structured data.
- Ingestion points: The
generateFromDocumentfunction inSKILL.mdreads content from a provided file path. - Boundary markers: Absent.
- Capability inventory:
fs.readFileinSKILL.mdand network communication via@gamma/sdkinSKILL.md. - Sanitization: Absent.
Audit Metadata