skills/alfredang/skills/pptx/Gen Agent Trust Hub

pptx

Warn

Audited by Gen Agent Trust Hub on Aug 10, 2026

Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill frequently invokes system binaries to process Office documents.
  • In scripts/office/soffice.py, the skill writes a C source file to a temporary location and executes gcc to compile it into a shared object.
  • It executes soffice (LibreOffice) with the LD_PRELOAD environment variable set to the compiled shim to bypass potential AF_UNIX socket restrictions.
  • scripts/thumbnail.py executes pdftoppm for image rendering.
  • scripts/office/validators/redlining.py executes git diff to validate tracked changes.
  • [EXTERNAL_DOWNLOADS]: The skill requires several external dependencies to be installed.
  • Instructions in SKILL.md specify installing Python packages markitdown[pptx] and Pillow.
  • It also requires the global installation of several NPM packages including pptxgenjs, react-icons, react, react-dom, and sharp.
  • It relies on the presence of system tools such as LibreOffice, Poppler, and GCC.
  • [PROMPT_INJECTION]: The skill processes external .pptx files which creates a surface for indirect prompt injection.
  • Ingestion point: SKILL.md and editing.md describe using markitdown to extract text from user-provided PowerPoint files.
  • Boundary markers: The extracted content is not explicitly delimited in the provided instructions to prevent the agent from obeying embedded commands.
  • Capabilities: The skill has significant local execution privileges, including the ability to run shell commands and compile C code.
  • Sanitization: No sanitization of the extracted document text is performed before it is processed by the agent.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 10, 2026, 01:55 AM
Security Audit — agent-trust-hub — pptx