ppt-generator
Pass
Audited by Gen Agent Trust Hub on Mar 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill relies on the standard
python-pptxlibrary for generating PowerPoint files. This is a common and legitimate dependency for the stated functionality. - [DATA_PROCESSING]: The script
generate_ppt.pyprocesses user-provided content (titles, bullet points, chart data) to populate PPT slides. This data is handled strictly within the context of generating a document and is not executed or sent to external servers. - [COMMAND_EXECUTION]: There is no evidence of arbitrary command execution or shell spawning. The script uses structured calls to the
pptxAPI. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from the user to create slides. While this presents an attack surface for indirect prompt injection (e.g., including malicious instructions in the text of a slide), the script itself does not interpret or execute this data, and the risk is limited to the content of the generated document.
Audit Metadata