pptx
Pass
Audited by Gen Agent Trust Hub on Apr 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes Python's
subprocess.run()to interface with system utilities for various document processing tasks. - Scripts such as
thumbnail.py,pack.py, andredlining.pyexecutesoffice(LibreOffice),pdftoppm(Poppler), andgitto perform slide-to-image conversion, document validation, and text difference analysis. - These commands operate on files within the agent's workspace and are fundamental to the skill's stated purpose.
- [EXTERNAL_DOWNLOADS]: The skill's instructions guide the installation of necessary dependencies using standard package managers.
- It lists well-known and reputable tools such as
playwright,sharp,pptxgenjs, andlibreofficeto be installed vianpm,pip, andapt-get. - [SAFE]: The skill implements security best practices by employing the
defusedxmllibrary for parsing Office Open XML files. - This prevents XML External Entity (XXE) attacks, which are a common concern when processing XML-based document formats like .pptx.
Audit Metadata