pptx
Warn
Audited by Gen Agent Trust Hub on Apr 16, 2026
Risk Level: MEDIUMCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The utility script
scripts/office/soffice.pyperforms runtime compilation by invokinggccto build a shared library (lo_socket_shim.so) from source code embedded within the script. This is used as a workaround for socket restrictions in sandboxed environments. - [COMMAND_EXECUTION]: The script
scripts/office/soffice.pyuses theLD_PRELOADenvironment variable to inject the dynamically compiled shared library into the LibreOffice (soffice) process to intercept system calls. - [COMMAND_EXECUTION]: Multiple scripts in the skill (
scripts/thumbnail.py,scripts/office/soffice.py,scripts/office/validators/redlining.py) utilizesubprocess.runto execute external system tools, includingsoffice,pdftoppm,git, andgcc. - [COMMAND_EXECUTION]: The skill uses
npm install -g pptxgenjsand variouspipcommands to install functional dependencies at runtime.
Audit Metadata