powerpoint

Fail

Audited by Gen Agent Trust Hub on Sep 1, 2026

Risk Level: HIGHPRIVILEGE_ESCALATIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
  • [PRIVILEGE_ESCALATION]: The skill requires administrative privileges to install system-level dependencies. Evidence: SKILL.md contains the command sudo apt install poppler-utils libreoffice (root权限).\n- [COMMAND_EXECUTION]: The skill utilizes high-risk command flags to bypass environment protections. Evidence: SKILL.md uses pip3 install --break-system-packages, which overrides safety mechanisms designed to protect the system's Python environment. It also performs global installations using npm install -g.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted presentation data that could influence agent behavior. \n
  • Ingestion points: The skill reads .pptx files using markitdown and custom scripts (thumbnail.py, unpack.py) in SKILL.md.\n
  • Boundary markers: There are no explicit boundary markers or instructions to ignore embedded content within the presentation files.\n
  • Capability inventory: The skill performs file system writes, executes subprocesses (soffice, pdftoppm, Python scripts), and manages package installations.\n
  • Sanitization: No sanitization or validation of the extracted slide content is performed before processing.\n- [DYNAMIC_EXECUTION]: The skill provides instructional code for manual file manipulation and repacking. Evidence: references/python-pptx-spTree-pitfall.md provides a Python implementation for extracting, editing XML, and repacking .pptx files as a ZIP archive, which involves low-level structural modifications.
Recommendations
  • AI detected serious security threats
Audit Metadata
Risk Level
HIGH
Analyzed
Sep 1, 2026, 05:59 AM