pptx
Pass
Audited by Gen Agent Trust Hub on Apr 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: Multiple Python scripts utilize the
subprocessmodule to call established system utilities for document conversion and comparison tasks. Specifically,scripts/thumbnail.pyandooxml/scripts/pack.pyusesoffice(LibreOffice) for PDF and HTML conversions,scripts/thumbnail.pyusespdftoppmfor image generation, andooxml/scripts/validation/redlining.pyusesgit difffor content comparison. These calls are restricted to functional requirements and use standard system tools. - [EXTERNAL_DOWNLOADS]: The skill's documentation and setup instructions reference several well-known third-party libraries and system packages. This includes Python packages like
markitdownanddefusedxml, and Node.js packages likepptxgenjs,playwright, andsharp. These dependencies are standard for the skill's stated purpose of document manipulation and rendering. - [REMOTE_CODE_EXECUTION]: The skill uses Playwright (
html2pptx.js) to render HTML content in a headless browser to calculate layout positions for PowerPoint elements. While this involve browser automation, it is a local operation intended for layout extraction and does not involve executing untrusted remote code.
Audit Metadata