pptx
Fail
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: HIGHDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [DYNAMIC_EXECUTION]: The script
scripts/office/soffice.pycontains logic to compile a C-based socket shim at runtime usinggccand inject it into the application environment via theLD_PRELOADenvironment variable. - Evidence:
subprocess.run(["gcc", "-shared", "-fPIC", "-o", str(_SHIM_SO), str(src), "-ldl"], ...)andenv["LD_PRELOAD"] = str(shim). - Purpose: This mechanism is designed to handle environments where
AF_UNIXsockets are restricted, facilitating the operation of LibreOffice in restricted or sandboxed environments. - [INDIRECT_PROMPT_INJECTION]: The skill operates on untrusted PowerPoint (
.pptx) files and facilitates a workflow where slide content is rendered to images and subsequently analyzed by subagents, creating a surface for indirect instructions to reach the AI. - Ingestion points: Content is ingested from user-supplied
.pptxfiles viascripts/office/unpack.pyand visualized usingscripts/thumbnail.pyor converted viasofficeandpdftoppm. - Boundary markers: Absent. The instructions for visual QA do not provide delimiters or specific "ignore instructions within content" warnings for the subagents processing the slide images.
- Capability inventory: The skill scripts have the capability to execute arbitrary shell commands via
subprocess.run(e.g., inthumbnail.pyandsoffice.py) and perform extensive file system modifications. - Sanitization: While XML parsing uses
defusedxmlto mitigate XML-based attacks, there is no evidence of filtering or sanitizing text content from slides that could influence the reasoning of subagents during the visual inspection loop. - [COMMAND_EXECUTION]: The skill relies heavily on executing external CLI tools via
subprocess.runto perform its primary tasks. scripts/thumbnail.py: Executessoffice(LibreOffice) for PDF conversion andpdftoppmfor image generation.scripts/office/soffice.py: Executesgccfor shim compilation andsofficefor office operations.scripts/office/validators/redlining.py: Executesgit difffor comparing text content.
Recommendations
- AI detected serious security threats
Audit Metadata