pptx
Pass
Audited by Gen Agent Trust Hub on Mar 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes
subprocess.runto invoke several external utilities, including LibreOffice (soffice) for PDF conversion, Poppler (pdftoppm) for image extraction, andgitfor document comparisons. These operations are standard requirements for the skill's primary purpose of presentation processing and visual QA. - [COMMAND_EXECUTION]: To support execution in restricted or sandboxed environments, the
scripts/office/soffice.pyscript hardcodes a C source string which it compiles at runtime usinggcc. The resulting shared library is used viaLD_PRELOADto shim system socket calls, enabling LibreOffice's internal communication when UNIX sockets are blocked. This behavior is transparently implemented as a compatibility workaround. - [EXTERNAL_DOWNLOADS]: The skill requires the installation of several well-known libraries from official Python and Node.js registries, including
markitdown,pptxgenjs,Pillow, andsharp. These dependencies are standard tools for document parsing, generation, and image manipulation.
Audit Metadata