pptx
Warn
Audited by Gen Agent Trust Hub on May 21, 2026
Risk Level: MEDIUMCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/soffice.pydynamically writes C source code to a temporary file, compiles it usinggccat runtime, and uses theLD_PRELOADenvironment variable to inject the shared library into thesofficeprocess. This is designed to shim socket system calls to allow LibreOffice to run in sandboxed environments.- [COMMAND_EXECUTION]: Multiple scripts, includingscripts/thumbnail.py,scripts/soffice.py, andscripts/validators/redlining.py, use thesubprocess.runfunction to execute external system tools such assoffice,pdftoppm,git, andgccto support presentation rendering and validation.- [SAFE]: The skill uses thedefusedxmllibrary for all XML parsing operations, providing robust protection against XML External Entity (XXE) attacks.
Audit Metadata