double6-ppt-cli

Pass

Audited by Gen Agent Trust Hub on Oct 19, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Downloads the officecli tool from the npm registry during the bootstrap process. It also fetches royalty-free imagery from the Openverse API and user-provided HTTPS URLs for inclusion in slide decks.
  • [COMMAND_EXECUTION]: Extensively uses the subprocess module to manage virtual environments, install Python and Node.js dependencies, and execute external utilities including officecli, soffice (LibreOffice), and pdftoppm. On macOS, it utilizes osascript to perform native automation of Microsoft PowerPoint through AppleScript.
  • [DYNAMIC_EXECUTION]: The entry script scripts/d6ppt.py uses os.execv to re-execute itself within the bootstrapped virtual environment when required dependencies are missing from the global environment. It also uses dynamic module imports in its template backend for lazy loading.
  • [INDIRECT_PROMPT_INJECTION]: Processes user-supplied documents and PPTX templates (ingestion points in init --source and init --template). While it performs deterministic data extraction and manipulation, the content ingested enters the agent's context, representing an indirect injection surface. The skill provides structured inspection reports and content mapping to facilitate safe processing by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 19, 2026, 06:48 PM