pptx
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes several external system binaries via the Python
subprocessmodule to facilitate document processing: soffice(LibreOffice): Used for converting PowerPoint files to PDF for image generation.pdftoppm: Used to render PDF pages into JPEG thumbnails for visual inspection.git: Used specifically inscripts/office/validators/redlining.pyto generate word-level diffs between document versions for tracked change validation.gcc: Used to compile a custom socket shim shared library.- [DYNAMIC_EXECUTION]: In
scripts/office/soffice.py, the skill implements a sophisticated workaround for running LibreOffice in restricted or sandboxed environments where Unix domain sockets might be blocked. The script writes a C source file to a temporary directory, compiles it into a shared object (.so) usinggcc, and then loads it via theLD_PRELOADenvironment variable to shim socket-related system calls. This is a purely functional mechanism to enable headless Office operations in restricted environments. - [EXTERNAL_DOWNLOADS]: The documentation references several well-known and trusted external dependencies required for full functionality:
- Python:
markitdown(for text extraction) andPillow(for image processing). - Node.js:
pptxgenjs(for slide generation),react-icons,sharp, and standardreact/react-domlibraries. - [INDIRECT_PROMPT_INJECTION]: The skill has a significant data ingestion surface as it parses untrusted PowerPoint files and their internal XML structures (Category 8 surface).
- Ingestion points:
scripts/office/unpack.py(extraction),scripts/thumbnail.py(visual parsing), and various XML validators inscripts/office/validators/. - Boundary markers: The skill does not implement specific LLM-facing delimiters but relies on structured XML processing.
- Capability inventory: The skill possesses file system write access and external command execution capabilities.
- Sanitization: To mitigate XML-based attacks (such as XXE), the skill consistently uses
defusedxml.minidomfor all XML parsing operations, which is a security best practice for handling untrusted Office documents.
Audit Metadata