codeck-export
Warn
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: MEDIUMDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [DYNAMIC_EXECUTION]: The script
pptx/scripts/office/soffice.pyperforms runtime compilation of an embedded C source string into a shared library and injects it into thesofficeprocess usingLD_PRELOAD. This is used to wrap socket operations for environment compatibility. - [DYNAMIC_EXECUTION]: The script
pdf/scripts/fill_fillable_fields.pydynamically monkeypatches thepypdflibrary to modify internal behavior for form field attribute inheritance. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted HTML and deck assets through subagents during a visual QA loop. Ingestion points: user-supplied HTML and asset manifests. Boundary markers: Absent. Capability inventory: The skill has file system access and execution capabilities for compilers and office tools. Sanitization: Absent; content is processed without filtering before inspection.
- [COMMAND_EXECUTION]: The skill executes system utilities and compilers, including
gccfor building the socket shim andsofficefor document processing. - [EXTERNAL_DOWNLOADS]: The skill uses
npx playwright install chromiumto retrieve and install executable browser binaries at runtime from a well-known service provider.
Audit Metadata