pptx
Fail
Audited by Gen Agent Trust Hub on Mar 31, 2026
Risk Level: HIGHCOMMAND_EXECUTIONPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The script 'scripts/office/soffice.py' writes C source code to a temporary directory and invokes 'gcc' to compile it into a shared library at runtime.
- [COMMAND_EXECUTION]: The script 'scripts/office/soffice.py' utilizes the 'LD_PRELOAD' environment variable to inject the compiled shared library into the 'soffice' (LibreOffice) process. This library shims standard system calls (socket, listen, accept) to bypass process-level restrictions.
- [COMMAND_EXECUTION]: Several scripts use 'subprocess.run' to execute system utilities including 'soffice', 'pdftoppm', and 'git'.
- [PROMPT_INJECTION]: Indirect prompt injection vulnerability surface. The skill ingests untrusted text data extracted from PowerPoint files without using delimiters or sanitization before presenting it to the agent context. This could be exploited by malicious content within a presentation to manipulate agent logic.
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of external dependencies from public registries, including 'markitdown' via PyPI and 'pptxgenjs' via NPM.
Recommendations
- AI detected serious security threats
Audit Metadata