pptx
Pass
Audited by Gen Agent Trust Hub on Jul 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes several well-known and reputable external libraries for its core functionality. These include Microsoft's
markitdownfor document parsing,Pillowfor image processing, and thepptxgenjslibrary for creating presentations. These are standard dependencies for the tasks described. - [COMMAND_EXECUTION]: The skill provides instructions for executing various shell commands and local scripts to process files. This includes using
pythonto run utility scripts (e.g.,thumbnail.py,unpack.py,soffice.py) and standard tools likepdftoppmfor converting PDFs to images. These operations are limited to handling PowerPoint documents and their converted outputs. - [PROMPT_INJECTION]: The skill involves parsing untrusted content from
.pptxfiles using themarkitdowntool, which presents a surface for indirect prompt injection. Malicious instructions embedded within a presentation could potentially be processed by the agent after text extraction. - Ingestion points: Reading and analyzing content from user-provided
.pptxfiles in the "Reading Content" and "QA" workflows. - Boundary markers: The instructions do not currently define explicit boundary markers or "ignore" directives to separate extracted document text from agent instructions.
- Capability inventory: The agent has access to shell commands (
python,pdftoppm,soffice) and file system operations to support presentation workflows. - Sanitization: No specific sanitization or validation of the extracted text is described before it is processed by the agent.
Audit Metadata