pptx
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: Extracting text content from user-provided .pptx files via scripts/inventory.py or the markitdown utility creates a potential vector for indirect prompt injection. If a processed slide contains malicious instructions, they could be followed by the agent during analysis. * Ingestion points: scripts/inventory.py, markitdown command. * Boundary markers: Absent. * Capability inventory: Access to shell commands via subprocess.run and local file operations. * Sanitization: Absent for extracted text content.
- [COMMAND_EXECUTION]: Python scripts use subprocess.run to call system utilities. scripts/thumbnail.py invokes soffice and pdftoppm for slide image generation. ooxml/scripts/pack.py uses soffice for repacked document validation. ooxml/scripts/validation/redlining.py uses git diff for change tracking. These are legitimate uses of tools for document processing.
- [EXTERNAL_DOWNLOADS]: The skill requires several standard Python and Node.js dependencies, including playwright, sharp, pptxgenjs, and markitdown. These are well-known libraries from official registries and do not represent a security risk when used as documented.
Audit Metadata