pptx
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Utility scripts (thumbnail.py, pack.py, and redlining.py) utilize subprocess.run to invoke system tools such as LibreOffice (soffice), Poppler (pdftoppm), and Git for media conversion and text comparison. These operations are core to the skill's functionality and aligned with the primary use cases.
- [DYNAMIC_EXECUTION]: The library html2pptx.js uses Playwright's Chromium automation to render HTML slides. This is necessary to calculate coordinates for accurate conversion into PowerPoint; it operates on local file paths generated during the slide creation workflow.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external presentation and HTML data. 1. Ingestion points: inventory.py reads .pptx files and html2pptx.js reads .html files. 2. Boundary markers: Absent in the utility scripts themselves. 3. Capability inventory: subprocess.run (thumbnail.py, pack.py, redlining.py), file-write (rearrange.py, replace.py), and browser automation (html2pptx.js). 4. Sanitization: Employs the defusedxml library for secure XML parsing to mitigate risks associated with XML external entity (XXE) attacks.
Audit Metadata