powerpoint
Pass
Audited by Gen Agent Trust Hub on Jun 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or behaviors were detected during the analysis.
- The skill implements secure XML handling using the
defusedxmllibrary across its core scripts (clean.py,pack.py,merge_runs.py), which effectively mitigates XML External Entity (XXE) and other XML-based attacks. - Path safety is enforced in file manipulation scripts like
clean.py, which validates that all file operations remain scoped within the intended target directory usingrelative_tochecks on resolved paths. - External dependencies such as
markitdown,Pillow, andpptxgenjsare well-established, standard libraries for document processing and image manipulation. - Command execution is limited to standard Office automation tasks (e.g., using LibreOffice for PDF conversion), following established development patterns for document management agents.
Audit Metadata