pptx
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes external system utilities including LibreOffice (soffice), pdftoppm, and git to perform file format conversion, thumbnail generation, and difference calculation (scripts/office/soffice.py, scripts/thumbnail.py, scripts/office/validators/redlining.py).
- [DYNAMIC_EXECUTION]: The script scripts/office/soffice.py compiles an embedded C source code at runtime using gcc to create an LD_PRELOAD shim for compatibility with sandboxed environments.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external .pptx and XML data that enters the agent context. 1. Ingestion points: scripts/add_slide.py and scripts/clean.py parse XML from user-provided presentation files. 2. Boundary markers: Extracted slide content is demarcated using markdown comments (e.g., ''). 3. Capability inventory: Scripts utilize subprocess.run to call system binaries (scripts/office/soffice.py, scripts/thumbnail.py). 4. Sanitization: The skill utilizes defusedxml to prevent XML external entity (XXE) vulnerabilities.
Audit Metadata