powerpoint
Fail
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: HIGHPRIVILEGE_ESCALATIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [PRIVILEGE_ESCALATION]: The skill requires administrative privileges to install system-level dependencies. Evidence:
SKILL.mdcontains the commandsudo apt install poppler-utils libreoffice(root权限).\n- [COMMAND_EXECUTION]: The skill utilizes high-risk command flags to bypass environment protections. Evidence:SKILL.mdusespip3 install --break-system-packages, which overrides safety mechanisms designed to protect the system's Python environment. It also performs global installations usingnpm install -g.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted presentation data that could influence agent behavior. \n - Ingestion points: The skill reads
.pptxfiles usingmarkitdownand custom scripts (thumbnail.py,unpack.py) inSKILL.md.\n - Boundary markers: There are no explicit boundary markers or instructions to ignore embedded content within the presentation files.\n
- Capability inventory: The skill performs file system writes, executes subprocesses (
soffice,pdftoppm, Python scripts), and manages package installations.\n - Sanitization: No sanitization or validation of the extracted slide content is performed before processing.\n- [DYNAMIC_EXECUTION]: The skill provides instructional code for manual file manipulation and repacking. Evidence:
references/python-pptx-spTree-pitfall.mdprovides a Python implementation for extracting, editing XML, and repacking.pptxfiles as a ZIP archive, which involves low-level structural modifications.
Recommendations
- AI detected serious security threats
Audit Metadata