officecli-pptx
Fail
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: HIGHREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill instructs the user to install a CLI tool by piping a remote script directly into a shell interpreter.
- Evidence in
SKILL.md:curl -fsSL https://d.officecli.ai/install.sh | bashandirm https://d.officecli.ai/install.ps1 | iex. - [COMMAND_EXECUTION]: The skill relies extensively on executing shell commands (
officecli) to perform its primary functions, which could be exploited if malicious inputs are passed into the command arguments. - [EXTERNAL_DOWNLOADS]: The skill references external binaries and scripts for installation from domains outside of the primary trusted scope (e.g.,
d.officecli.ai), increasing the risk of supply chain attacks.
Recommendations
- HIGH: Downloads and executes remote code from: https://d.officecli.ai/install.sh - DO NOT USE without thorough review
- AI detected serious security threats
Audit Metadata