html-slides
Pass
Audited by Gen Agent Trust Hub on Apr 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references and downloads legitimate web libraries and fonts (GSAP, Prism.js, Mermaid, Google Fonts) from well-known and trusted content delivery networks for the purpose of enhancing presentation functionality and aesthetics.
- [COMMAND_EXECUTION]: Includes a Python utility script (scripts/extract-pptx.py) used to parse PowerPoint files into a structured format. The script performs local file operations and requires standard third-party libraries (python-pptx, Pillow).
- [REMOTE_CODE_EXECUTION]: While the skill loads external JavaScript libraries in the generated HTML output, these are well-known, versioned libraries from a trusted CDN (cdnjs) intended for client-side execution in a browser environment.
- [SAFE]: No malicious patterns, obfuscation, unauthorized data access, or persistence mechanisms were detected. All external resources originate from reputable vendors or industry-standard repositories.
Audit Metadata