double6-ppt-cli
Pass
Audited by Gen Agent Trust Hub on Oct 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Downloads the
officeclitool from the npm registry during the bootstrap process. It also fetches royalty-free imagery from the Openverse API and user-provided HTTPS URLs for inclusion in slide decks. - [COMMAND_EXECUTION]: Extensively uses the
subprocessmodule to manage virtual environments, install Python and Node.js dependencies, and execute external utilities includingofficecli,soffice(LibreOffice), andpdftoppm. On macOS, it utilizesosascriptto perform native automation of Microsoft PowerPoint through AppleScript. - [DYNAMIC_EXECUTION]: The entry script
scripts/d6ppt.pyusesos.execvto re-execute itself within the bootstrapped virtual environment when required dependencies are missing from the global environment. It also uses dynamic module imports in its template backend for lazy loading. - [INDIRECT_PROMPT_INJECTION]: Processes user-supplied documents and PPTX templates (ingestion points in
init --sourceandinit --template). While it performs deterministic data extraction and manipulation, the content ingested enters the agent's context, representing an indirect injection surface. The skill provides structured inspection reports and content mapping to facilitate safe processing by the agent.
Audit Metadata