libreoffice-impress

Pass

Audited by Gen Agent Trust Hub on Apr 9, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes shell commands to manage the LibreOffice process required for document manipulation.
  • In scripts/uno_bridge.py, the skill uses subprocess.Popen to launch the soffice (LibreOffice) binary in headless mode, establishing a secure communication channel via a local pipe.
  • In scripts/impress/snapshot.py, subprocess.run is used to invoke LibreOffice's built-in conversion utility to generate slide snapshots in PNG format.
  • In both instances, the executable path is automatically resolved from trusted system locations or the environment's PATH, and the command arguments are strictly controlled by the skill's logic, mitigating the risk of arbitrary command injection.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 9, 2026, 09:08 AM