slides-critique
Pass
Audited by Gen Agent Trust Hub on Mar 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes several shell commands to manage presentation files. It uses
findto locate configuration files anduvxto run a specializedslidestool for inspection and editing. These operations are restricted to the local file system and align with the skill's documented purpose. - [EXTERNAL_DOWNLOADS]: The skill dynamically installs and runs the
agent-slidespackage usinguvx. This involves downloading code from an external package registry. This behavior is standard for the requested environment (Python 3.12+ and uv) and is necessary for the skill's functionality. - [PROMPT_INJECTION]: The skill processes untrusted input from external slide files, which presents a surface for indirect prompt injection.
- Ingestion points: Presentation content is read from
output.pptxandslides.json(SKILL.md). - Boundary markers: There are no explicit markers or instructions to isolate the slide content from the agent's core instructions.
- Capability inventory: The skill can execute commands and modify files using the
uvx slides editanduvx slides applycommands (SKILL.md). - Sanitization: No data sanitization or escaping of the ingested slide text is performed before the critique process.
Audit Metadata