ppt-generator

Pass

Audited by Gen Agent Trust Hub on Apr 17, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/ppt_engine.py uses subprocess.run to call the system utility fc-list for font discovery. This is a legitimate function used to ensure correct rendering of Chinese and English characters on the host system.
  • [COMMAND_EXECUTION]: The scripts/visual_reviewer.py script executes external tools such as libreoffice, pdftoppm, and node to convert slides into images for visual review. This functionality is intended for quality assurance and previewing the generated presentation.
  • [EXTERNAL_DOWNLOADS]: The skill facilitates image generation by connecting to established AI provider APIs (e.g., OpenAI, Stability AI, Qwen). The documentation correctly advises users to store API keys in environment variables or .env files rather than hardcoding them, which is a secure practice.
  • [COMMAND_EXECUTION]: The skill includes several utility scripts for SVG processing (finalize_svg.py, embed_icons.py, embed_images.py, etc.) which are invoked locally to prepare assets, fix aspect ratios, and convert elements before final conversion to DrawingML native shapes.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 17, 2026, 06:05 AM
Security Audit — agent-trust-hub — ppt-generator