pptx
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes system commands via Python's
subprocess.run()to perform essential document operations. - In
ooxml/scripts/pack.pyandscripts/thumbnail.py, thesoffice(LibreOffice) utility is invoked to convert Office documents to HTML or PDF formats. - In
scripts/thumbnail.py,pdftoppmis used to rasterize PDF slide pages into JPEG images for visual inspection. - In
ooxml/scripts/validation/redlining.py,git diffis used to compare text content and validate tracked changes within Word documents. - [EXTERNAL_DOWNLOADS]: The skill instructions specify several well-known third-party dependencies required for its functionality.
- Node.js dependencies include
playwrightfor slide rendering,sharpfor image and gradient processing, andpptxgenjsfor presentation generation. - Python dependencies include
markitdownfor text extraction anddefusedxmlfor secure XML parsing to mitigate XXE vulnerabilities. - [DATA_EXPOSURE_&_EXFILTRATION]: The skill processes structured data from presentation files.
- Ingestion points:
ooxml/scripts/unpack.pyandscripts/inventory.pyingest content from Office Open XML (OOXML) files. - Capability inventory: The skill has the capability to write files and execute specific system commands for document conversion.
- Sanitization: The skill implements secure XML parsing using the
defusedxmllibrary to prevent common XML-based attacks.
Audit Metadata