pptx-slides

Pass

Audited by Gen Agent Trust Hub on Apr 19, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: Uses the fc-match system utility to identify and locate font files. This is used for accurate text measurement and bounding box calculations when rendering slides.
  • [EXTERNAL_DOWNLOADS]: Automatically fetches essential dependencies, including pptxgenjs, skia-canvas, and fontkit, from the public NPM registry using the Bun package manager during execution.
  • [DATA_EXFILTRATION]: Performs local file system read operations to process images and determine their dimensions. This is necessary for correctly positioning and scaling visual content within the generated PPTX file.
  • [SAFE]: The skill processes external data for image handling and layout.
  • Ingestion points: User-provided file paths or data URIs for images in scripts/image.ts and scripts/layout_builders.ts.
  • Boundary markers: Not explicitly defined in instructions, but behavior is constrained to programmatic slide generation.
  • Capability inventory: Subprocess execution (fc-match) and file system access (readFileSync).
  • Sanitization: Validates image headers (magic bytes) against known formats (PNG, JPEG, GIF, WebP, SVG) to ensure processed files are valid images.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 19, 2026, 04:28 PM