skills/jd-opensource/joysafeter/pptx/Gen Agent Trust Hub

pptx

Pass

Audited by Gen Agent Trust Hub on Sep 28, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes several Python and Node.js scripts that execute external utilities for document processing.
  • scripts/thumbnail.py and ooxml/scripts/pack.py invoke soffice (LibreOffice) to convert presentations to PDF or HTML formats for validation and analysis.
  • scripts/thumbnail.py invokes pdftoppm (Poppler) to generate image thumbnails of slides.
  • ooxml/scripts/validation/redlining.py invokes git diff to perform character-level comparison of document revisions.
  • All command executions are restricted to local file paths and use well-established system utilities for their intended purposes.
  • [EXTERNAL_DOWNLOADS]: The skill requires several standard industry dependencies for presentation manipulation.
  • Documented Python dependencies include markitdown, python-pptx, and defusedxml (used for secure XML parsing to prevent XXE attacks).
  • Documented Node.js dependencies include pptxgenjs, playwright, and sharp for rendering and image processing.
  • These dependencies are sourced from official registries (npm and PyPI) and are consistent with the skill's functionality.
  • [DYNAMIC_EXECUTION]: The scripts/html2pptx.js utility uses Playwright to render HTML slide templates. This is a standard method for calculating the exact positioning of elements before converting them to PowerPoint shapes and does not involve execution of untrusted remote code.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 28, 2026, 02:37 PM