pptx
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes several Python and Node.js scripts that execute external utilities for document processing.
scripts/thumbnail.pyandooxml/scripts/pack.pyinvokesoffice(LibreOffice) to convert presentations to PDF or HTML formats for validation and analysis.scripts/thumbnail.pyinvokespdftoppm(Poppler) to generate image thumbnails of slides.ooxml/scripts/validation/redlining.pyinvokesgit diffto perform character-level comparison of document revisions.- All command executions are restricted to local file paths and use well-established system utilities for their intended purposes.
- [EXTERNAL_DOWNLOADS]: The skill requires several standard industry dependencies for presentation manipulation.
- Documented Python dependencies include
markitdown,python-pptx, anddefusedxml(used for secure XML parsing to prevent XXE attacks). - Documented Node.js dependencies include
pptxgenjs,playwright, andsharpfor rendering and image processing. - These dependencies are sourced from official registries (npm and PyPI) and are consistent with the skill's functionality.
- [DYNAMIC_EXECUTION]: The
scripts/html2pptx.jsutility uses Playwright to render HTML slide templates. This is a standard method for calculating the exact positioning of elements before converting them to PowerPoint shapes and does not involve execution of untrusted remote code.
Audit Metadata