powerpoint

Pass

Audited by Gen Agent Trust Hub on Jun 17, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No malicious patterns or behaviors were detected during the analysis.
  • The skill implements secure XML handling using the defusedxml library across its core scripts (clean.py, pack.py, merge_runs.py), which effectively mitigates XML External Entity (XXE) and other XML-based attacks.
  • Path safety is enforced in file manipulation scripts like clean.py, which validates that all file operations remain scoped within the intended target directory using relative_to checks on resolved paths.
  • External dependencies such as markitdown, Pillow, and pptxgenjs are well-established, standard libraries for document processing and image manipulation.
  • Command execution is limited to standard Office automation tasks (e.g., using LibreOffice for PDF conversion), following established development patterns for document management agents.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 17, 2026, 03:43 PM
Security Audit — agent-trust-hub — powerpoint