pptx
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses local system tools to perform document management tasks. These operations are essential for the presentation management workflow and are conducted safely on local files.
- The
thumbnail.pyandpack.pyscripts executesofficeandpdftoppmfor slide conversion and validation. - The
redlining.pyscript executesgit difffor comparing document revisions. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided PowerPoint files (.pptx), which is a document processing attack surface. The skill manages this risk through the following:
- Ingestion points: Data from presentations is extracted via
markitdownandpython-pptx(ininventory.py). - Capability inventory: The skill can write XML files and execute local binary utilities (documented in
pack.pyandthumbnail.py). - Sanitization: Employs
defusedxmlinunpack.pyandpack.pyfor secure XML parsing to prevent entity-based attacks.
Audit Metadata