open-ppt
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill orchestrates its export and QA workflow by invoking system commands through Python's
subprocessmodule and Node.js'schild_process. Inscripts/export_pptx.py, therun_commandhelper is used to verify the local environment (Node.js, NPM, Python) and install necessary tools. The Node.js exporter also utilizesspawnSyncto safely parse YAML files using a Python fallback when native parsers are unavailable. - [EXTERNAL_DOWNLOADS]: To ensure functionality across different environments, the skill manages several dependencies at runtime. It installs the
agent-browserpackage globally via NPM if not found, and usespip install --userto fetchpyyaml,pillow, andwebsocket-clientfrom official registries. Additionally, the export script supports fetching remote image assets if they are referenced by a presentation's manifest. - [DYNAMIC_EXECUTION]: The skill relies on dynamic execution to perform high-fidelity exports. It executes a local WebAssembly binary (
pptd_wasm_bg.wasm) to handle the conversion of the PPTD format into valid PPTX files. Furthermore, it uses the Chrome DevTools Protocol (CDP) to execute JavaScript snippets within a headless browser instance for automating export dialogs and capturing page screenshots for the multimodal visual review process.
Audit Metadata