skills/eigent-ai/agent-skills/pptx/Gen Agent Trust Hub

pptx

Pass

Audited by Gen Agent Trust Hub on Mar 24, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes subprocess.run to invoke several external utilities, including LibreOffice (soffice) for PDF conversion, Poppler (pdftoppm) for image extraction, and git for document comparisons. These operations are standard requirements for the skill's primary purpose of presentation processing and visual QA.
  • [COMMAND_EXECUTION]: To support execution in restricted or sandboxed environments, the scripts/office/soffice.py script hardcodes a C source string which it compiles at runtime using gcc. The resulting shared library is used via LD_PRELOAD to shim system socket calls, enabling LibreOffice's internal communication when UNIX sockets are blocked. This behavior is transparently implemented as a compatibility workaround.
  • [EXTERNAL_DOWNLOADS]: The skill requires the installation of several well-known libraries from official Python and Node.js registries, including markitdown, pptxgenjs, Pillow, and sharp. These dependencies are standard tools for document parsing, generation, and image manipulation.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 24, 2026, 03:17 PM
Security Audit — agent-trust-hub — pptx