slides-grab-export
Pass
Audited by Gen Agent Trust Hub on Apr 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill workflow is centered around the execution of the
slides-grabCLI tool and several local scripts (e.g.,html2pptx.js,thumbnail.py,pack.py) for slide generation and conversion tasks. - [EXTERNAL_DOWNLOADS]: The skill documentation identifies several established third-party dependencies, including
pptxgenjs,playwright, andsharpfor Node.js, andmarkitdown,defusedxml, andpillowfor Python. These libraries and tools (including system utilities like LibreOffice and Poppler) are standard for document processing and conversion. - [PROMPT_INJECTION]: The skill processes user-provided HTML content from slide files, creating a surface for indirect prompt injection. This risk is inherent to the skill's purpose and is managed by structured conversion logic and the use of the
defusedxmllibrary for secure XML handling.
Audit Metadata