libreoffice-impress
Pass
Audited by Gen Agent Trust Hub on Apr 9, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands to manage the LibreOffice process required for document manipulation.
- In
scripts/uno_bridge.py, the skill usessubprocess.Popento launch thesoffice(LibreOffice) binary in headless mode, establishing a secure communication channel via a local pipe. - In
scripts/impress/snapshot.py,subprocess.runis used to invoke LibreOffice's built-in conversion utility to generate slide snapshots in PNG format. - In both instances, the executable path is automatically resolved from trusted system locations or the environment's PATH, and the command arguments are strictly controlled by the skill's logic, mitigating the risk of arbitrary command injection.
Audit Metadata