skills/hiyeshu/codeck/codeck-export/Gen Agent Trust Hub

codeck-export

Warn

Audited by Gen Agent Trust Hub on Oct 18, 2026

Risk Level: MEDIUMDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [DYNAMIC_EXECUTION]: The script pptx/scripts/office/soffice.py performs runtime compilation of an embedded C source string into a shared library and injects it into the soffice process using LD_PRELOAD. This is used to wrap socket operations for environment compatibility.
  • [DYNAMIC_EXECUTION]: The script pdf/scripts/fill_fillable_fields.py dynamically monkeypatches the pypdf library to modify internal behavior for form field attribute inheritance.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted HTML and deck assets through subagents during a visual QA loop. Ingestion points: user-supplied HTML and asset manifests. Boundary markers: Absent. Capability inventory: The skill has file system access and execution capabilities for compilers and office tools. Sanitization: Absent; content is processed without filtering before inspection.
  • [COMMAND_EXECUTION]: The skill executes system utilities and compilers, including gcc for building the socket shim and soffice for document processing.
  • [EXTERNAL_DOWNLOADS]: The skill uses npx playwright install chromium to retrieve and install executable browser binaries at runtime from a well-known service provider.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Oct 18, 2026, 03:12 AM