pptx
Warn
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONMETADATA_POISONINGEXTERNAL_DOWNLOADS
Full Analysis
- [DYNAMIC_EXECUTION]: The script
scripts/office/soffice.pyincludes a hardcoded C source code block that is written to a temporary file and compiled at runtime usinggcc. The resulting shared object is then loaded into thesoffice(LibreOffice) process via theLD_PRELOADenvironment variable. While this is intended to bypass AF_UNIX socket restrictions in sandboxed environments, runtime compilation and library injection into subprocesses represent high-risk execution patterns. - [METADATA_POISONING]: The skill's documentation and frontmatter metadata claim it is created and maintained by "Anthropic, PBC", providing official Anthropic source URLs. However, the associated context identifies the author as "k-dense-ai". This discrepancy in authorship is deceptive and may lead users to misjudge the skill's trust level.
- [COMMAND_EXECUTION]: The skill frequently invokes external binaries through the
subprocessmodule. These includesofficefor PDF conversion,pdftoppmfor image generation,gitfor diffing content, andgccfor the runtime compilation described above. These executions are integrated into the primary workflow of presentation analysis and structural duplication. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user-supplied
.pptxfiles as its primary input. - Ingestion points: Presentation content is ingested in
scripts/thumbnail.py(line 120) andscripts/office/validate.pyduring parsing. - Boundary markers: The instructions do not define boundary markers or
Audit Metadata