pptx-generator
Pass
Audited by Gen Agent Trust Hub on Mar 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The workflow involves generating multiple JavaScript modules and a compilation script that are executed using
nodeto build the presentation. It also utilizespython -m markitdownfor reading file content. - [EXTERNAL_DOWNLOADS]: The skill requires the installation of several external packages, including
markitdownfrom Microsoft and standard NPM libraries likepptxgenjsandsharp. It also demonstrates functionality for fetching remote images via URL. - [PROMPT_INJECTION]: The skill processes untrusted user-provided PowerPoint files to extract text. This extracted content is used as input for the agent, creating a surface for indirect prompt injection if the input files contain malicious instructions. Ingestion points: Reading external
.pptxfiles usingmarkitdown. Boundary markers: None identified. Capability inventory: File writing, script execution vianode, and network asset fetching. Sanitization: The skill specifies the use ofdefusedxml.minidomfor parsing XML templates to prevent XXE vulnerabilities.
Audit Metadata