image-deck: GPT Image 2 Slide Deck

• Outcome: Pass
• Latest audit: Jul 22, 2026 · 5:16 PM UTC
• Version: 0.1.20

Overview

This skill is a coherent slide-deck image-generation workflow with disclosed review gates, with the main caveat that some templates use Chinese-only approval text despite supporting other deck languages.

Install this if you want image-only slide decks and are comfortable with the agent reading your source material, doing research when needed, saving local prompt/log files, and using image generation. Non-Chinese users should watch the approval prompts carefully because some required confirmation wording is Chinese-only.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• System Prompt Leakage: Direct Leakage, Indirect Extraction, Tool-Based Exfiltration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (5)

Natural-Language Policy Violations

Medium

• Confidence: 95% confidence
• Finding: The prompt group template hard-codes Chinese instructions for generation and workflow, which can override or conflict with the user's requested language and force downstream interaction into a language the user did not choose. In this skill, language choice is explicitly supposed to be confirmed with the user, so embedding mandatory Chinese-only template text undermines user intent and can cause incorrect outputs, misleading approvals, or inaccessible interaction.

Natural-Language Policy Violations

Medium

• Confidence: 96% confidence
• Finding: The review/approval template requires Chinese-only confirmation language, which creates a forced-language gate for a workflow that should support the user's selected language. Because this skill uses approval checkpoints, a mismatched language at the gate can prevent informed consent, confuse the user about what they are approving, and lead to unauthorized or mistaken continuation of slide generation.

Natural-Language Policy Violations

Medium

• Confidence: 97% confidence
• Finding: The sample-style approval gate mandates a Chinese confirmation phrase, creating a brittle control point that may fail or coerce users who are operating in another language. Since this gate authorizes generation of the remaining slides, forcing a single-language confirmation increases the risk of accidental approval handling, user lockout, or workflow manipulation through language mismatch.

Direct Prompt Extraction

High

• Category: System Prompt Leakage

Content

1. **Ask required setup questions** before planning: page count, language, style, text richness/content density, and topic if no source is present.
2. **Read source material or research the topic** before writing the deck plan.
3. **Show a PPT slide-by-slide design document directly in the chat** as the planning preview.
4. **Self-check the complete prompt package internally before showing it**, then show prompt groups directly in the chat, up to 8 slides per group.
5. **Ask for overall design approval only after both the design document and prompt groups are shown.** This confirmation covers the full-deck structure, slide-by-slide content, visual bible, and prompts. Do not ask the user to confirm the design document separately and then confirm prompts again.
6. **After overall design approval, generate exactly one master sample and no other slide.** Approval at this stage authorizes only the sample, even if the user says "confirm generation," "proceed," or similar.
7. **Show the generated master sample in the chat and stop.** Ask the user to approve the sample style or request changes. The review covers the actual palette, typography mood, layout grammar, information density, and overall visual feel. Do not generate another slide, assemble a PPTX/PDF, or start background generation while waiting.

• Confidence: 96% confidence
• Finding: show prompt

Direct Prompt Extraction

High

• Category: System Prompt Leakage

Content

- Prefer 12-18 slides for a first pass; 15 is a good default.
- Show the PPT slide-by-slide design document inline before prompt groups. This is required even when source notes or prompt files are also saved, but it is not a separate confirmation gate.
- Default slide design is 图文并茂: each slide should feel like a real PPT page, with text and visuals balanced according to its role and selected content-density mode.
- Show prompts inline in groups of up to 8 slides before generation. This is required even when prompt files are also saved.
- Use two distinct approvals: first approve the overall design to authorize one sample; then approve the displayed sample's style to authorize all remaining slides.
- After generating the sample, stop the turn. Never generate the remaining slides in the same uninterrupted run.
- Keep user-facing confirmation copy natural and concise. Do not expose internal gate terminology or narrate prohibitions unless the user asks how the workflow works.

• Confidence: 97% confidence
• Finding: Show prompt

VirusTotal

64/64 vendors flagged this skill as clean.

Static analysis

No suspicious patterns detected.