pptx
Warn
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: MEDIUMDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The script
scripts/office/soffice.pycontains embedded C source code that is written to a temporary file and compiled usinggccat runtime. The resulting shared library is then loaded into the LibreOffice process using theLD_PRELOADenvironment variable to circumvent socket restrictions in sandboxed environments. - [INDIRECT_PROMPT_INJECTION]: The skill exhibits an attack surface for indirect prompt injection as it processes untrusted PowerPoint files.
- Ingestion points: Presentations are parsed for text extraction and thumbnail generation as described in
SKILL.mdand implemented inscripts/thumbnail.py. - Boundary markers: Uses markdown markers like
<!-- Slide number: N -->to delimit content during reading. - Capability inventory: Includes subprocess execution for PDF conversion (
soffice,pdftoppm), version control comparison (git), and runtime compilation (gcc) inscripts/office/soffice.pyandscripts/thumbnail.py. - Sanitization: Uses the
defusedxmllibrary across scripts to protect against XML-based attacks during presentation parsing.
Audit Metadata