pptx

This module is primarily a LibreOffice launcher that adds a temporary profile and environment modifications, but it also contains a high-risk optional pathway: it can write C source, compile a native shared library with gcc, and inject it into the soffice process via LD_PRELOAD. While no direct exfiltration is visible in the Python, the native shim content (missing/truncated in the snippet) is critical; until verified, this represents a substantial supply-chain security risk due to the ability to execute arbitrary native code within the soffice process context.