pptx-win

Warn

Audited by Socket on Aug 16, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/office/unpack.py

No clear evidence of intentional malware, tracking, credential theft, or network-based exfiltration in this fragment. The primary security weakness is use of zipfile.ZipFile.extractall(output_path) on an untrusted Office ZIP without validating member paths, enabling potential ZIP Slip/path traversal and arbitrary file write outside the chosen output directory. Additional risk could be introduced by the unseen DOCX helper functions, but that behavior is not assessable from this module alone.

Confidence: 72%Severity: 64%
Audit Metadata
Analyzed At
Aug 16, 2026, 07:59 AM
Package URL
pkg:socket/skills-sh/dachent%2Fskills%2Fpptx-win%2F@5908c8ae7daff61fe98e1ff389dc30a19fcdfc2269e015709ea811316843693d
Security Audit — socket — pptx-win