pptx-slides
Pass
Audited by Gen Agent Trust Hub on Apr 19, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: Uses the
fc-matchsystem utility to identify and locate font files. This is used for accurate text measurement and bounding box calculations when rendering slides. - [EXTERNAL_DOWNLOADS]: Automatically fetches essential dependencies, including
pptxgenjs,skia-canvas, andfontkit, from the public NPM registry using the Bun package manager during execution. - [DATA_EXFILTRATION]: Performs local file system read operations to process images and determine their dimensions. This is necessary for correctly positioning and scaling visual content within the generated PPTX file.
- [SAFE]: The skill processes external data for image handling and layout.
- Ingestion points: User-provided file paths or data URIs for images in
scripts/image.tsandscripts/layout_builders.ts. - Boundary markers: Not explicitly defined in instructions, but behavior is constrained to programmatic slide generation.
- Capability inventory: Subprocess execution (
fc-match) and file system access (readFileSync). - Sanitization: Validates image headers (magic bytes) against known formats (PNG, JPEG, GIF, WebP, SVG) to ensure processed files are valid images.
Audit Metadata