pptx-posters
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill employs a 'fail-closed' design philosophy, requiring explicit author approval hashes and rejecting common placeholders or unverified data in the input manifest.- [SAFE]: Robust path validation in scripts/_common.py prevents directory traversal and symlink attacks by resolving paths and enforcing boundaries relative to the manifest directory.- [SAFE]: The PPTX inspector performs bounded ZIP and XML analysis to identify and reject malicious features such as macros, OLE objects, ActiveX controls, and external relationships without executing or extracting the file.- [SAFE]: Image processing includes stripping potentially sensitive metadata (EXIF, XMP, and text comments) and enforcing pixel safety limits to prevent resource exhaustion or decompression bomb attacks.- [SAFE]: Dependency management is strictly pinned to specific versions (python-pptx 1.0.2, Pillow 12.3.0, lxml 6.1.3), with runtime checks ensuring environment integrity.
Audit Metadata