template-slide-deck
Pass
Audited by Gen Agent Trust Hub on Mar 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill can fetch PowerPoint templates from external URLs if provided by the user, which is a standard feature for its primary purpose.
- [COMMAND_EXECUTION]: The skill executes internal Python scripts, including rearrange.py, inventory.py, and replace.py, to process files and generate the final presentation.
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection due to its handling of untrusted user content. Ingestion points: User-provided text, documents, and .pptx templates (SKILL.md). Boundary markers: Absent. Capability inventory: Local script execution and file system access (SKILL.md). Sanitization: Absent.
- [SAFE]: No evidence of hardcoded credentials, sensitive data exfiltration, or persistence mechanisms was found. The skill's operations align with its stated functionality.
Audit Metadata