pptx

Pass

Audited by Gen Agent Trust Hub on Aug 17, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes several external system binaries via the Python subprocess module to facilitate document processing:
  • soffice (LibreOffice): Used for converting PowerPoint files to PDF for image generation.
  • pdftoppm: Used to render PDF pages into JPEG thumbnails for visual inspection.
  • git: Used specifically in scripts/office/validators/redlining.py to generate word-level diffs between document versions for tracked change validation.
  • gcc: Used to compile a custom socket shim shared library.
  • [DYNAMIC_EXECUTION]: In scripts/office/soffice.py, the skill implements a sophisticated workaround for running LibreOffice in restricted or sandboxed environments where Unix domain sockets might be blocked. The script writes a C source file to a temporary directory, compiles it into a shared object (.so) using gcc, and then loads it via the LD_PRELOAD environment variable to shim socket-related system calls. This is a purely functional mechanism to enable headless Office operations in restricted environments.
  • [EXTERNAL_DOWNLOADS]: The documentation references several well-known and trusted external dependencies required for full functionality:
  • Python: markitdown (for text extraction) and Pillow (for image processing).
  • Node.js: pptxgenjs (for slide generation), react-icons, sharp, and standard react/react-dom libraries.
  • [INDIRECT_PROMPT_INJECTION]: The skill has a significant data ingestion surface as it parses untrusted PowerPoint files and their internal XML structures (Category 8 surface).
  • Ingestion points: scripts/office/unpack.py (extraction), scripts/thumbnail.py (visual parsing), and various XML validators in scripts/office/validators/.
  • Boundary markers: The skill does not implement specific LLM-facing delimiters but relies on structured XML processing.
  • Capability inventory: The skill possesses file system write access and external command execution capabilities.
  • Sanitization: To mitigate XML-based attacks (such as XXE), the skill consistently uses defusedxml.minidom for all XML parsing operations, which is a security best practice for handling untrusted Office documents.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 17, 2026, 02:14 AM