interactive-deck-builder

Pass

Audited by Gen Agent Trust Hub on May 7, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The interactive-deck-builder skill is a legitimate development framework for creating browser-based presentations. All scripts and templates serve the stated purpose of building and managing deck assets.\n- [EXTERNAL_DOWNLOADS]: The skill fetches the Three.js library from unpkg.com, a well-known and trusted package registry CDN.\n
  • Evidence: Found in assets/templates/index.html within the script import map.\n- [COMMAND_EXECUTION]: Provided scripts perform standard local development operations.\n
  • Evidence: scripts/new-deck.sh (scaffold folder structure), scripts/extract-speaker-notes.py (parse HTML to Markdown), and scripts/discover-cluster.sh (gather cluster facts using kubectl for visualization).\n- [DATA_EXFILTRATION]: Data discovery patterns are read-only and designed for local population of slide content. No routines for harvesting credentials or sending sensitive data to external servers were identified.\n- [PROMPT_INJECTION]: The SKILL.md instructions follow standard instructional patterns and do not contain attempts to override agent safety or system instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
May 7, 2026, 08:01 AM