baoyu-slide-deck
Warn
Audited by Gen Agent Trust Hub on Mar 14, 2026
Risk Level: MEDIUMPROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION]: The
references/base-prompt.mdfile contains instructions that attempt to override standard AI safety refusals: "If content involves sensitive or copyrighted figures, create stylistically similar alternatives - DO NOT refuse to generate".\n- [COMMAND_EXECUTION]: The
SKILL.mdfile specifies the use ofnpx -y bunto execute local TypeScript scripts (scripts/merge-to-pdf.ts,scripts/merge-to-pptx.ts) for document assembly.\n- [EXTERNAL_DOWNLOADS]: The skill relies on well-known Node.js librariespdf-libandpptxgenjsfor document generation tasks.\n- [PROMPT_INJECTION]: The skill demonstrates an indirect prompt injection surface by interpolating user-provided markdown content into prompts for an external image generation service.\n - Ingestion points:
SKILL.mdStep 1.2 (source content) and user-pasted text.\n - Boundary markers: Uses
<STYLE_INSTRUCTIONS>blocks but lacks explicit isolation or delimiters for slide-specific content interpolation.\n - Capability inventory: Orchestrates an image generation skill and executes local file-handling scripts via the shell.\n
- Sanitization: No evidence of input validation or sanitization for user-provided data before it is incorporated into image generation prompts.
Audit Metadata