pptx
Warn
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes system binaries to perform visual slide analysis and document validation. It uses
sofficefor PDF conversion,pdftoppmfor image generation, andgitfor comparing changes in Word documents. - Evidence:
scripts/thumbnail.py,scripts/office/validators/redlining.py. - [REMOTE_CODE_EXECUTION]: The skill performs dynamic execution by writing an embedded C source file to a temporary directory, compiling it into a shared library using
gcc, and then injecting this library into thesofficeprocess environment usingLD_PRELOAD. This is used as a shim to handle UNIX socket restrictions in sandboxed environments. - Evidence:
scripts/office/soffice.py.
Audit Metadata