gamma-migration-deep-dive

Pass

Audited by Gen Agent Trust Hub on Mar 24, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill does not contain any detected malicious code, obfuscation, or unauthorized data exfiltration patterns. No prompt injection or privilege escalation markers were found.
  • [DATA_EXPOSURE]: API credentials for Gamma and Google Drive are handled using environment variables (process.env.GAMMA_API_KEY) and standard authentication methods, which aligns with security best practices for avoiding hardcoded secrets.
  • [COMMAND_EXECUTION]: The skill uses Node.js for inventorying files, processing PowerPoint archives, and orchestrating API requests. These operations are within the expected scope of a presentation migration utility and do not include arbitrary command execution.
  • [EXTERNAL_DOWNLOADS]: Network activity is restricted to communicating with well-known and trusted services, including Google Drive APIs and the official Gamma platform, which are necessary for the migration process.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 24, 2026, 04:32 PM