pptx
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes system commands using the
subprocessmodule to perform document conversions viasoffice(LibreOffice) and slide image generation viapdftoppm. These operations are restricted to the skill's specific domain of presentation management. - [DYNAMIC_EXECUTION]: To achieve high-fidelity conversion from HTML to PowerPoint, the skill uses the
playwrightlibrary to launch a headless browser. This is used to render user-provided HTML content and extract precise visual coordinates for slide elements. - [SAFE]: The skill demonstrates secure handling of potentially untrusted Office XML data by using the
defusedxmllibrary for all XML parsing tasks, which effectively mitigates XML External Entity (XXE) and other XML-based injection attacks.
Audit Metadata