pptx

Pass

Audited by Gen Agent Trust Hub on Apr 19, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: Multiple Python scripts utilize the subprocess module to call established system utilities for document conversion and comparison tasks. Specifically, scripts/thumbnail.py and ooxml/scripts/pack.py use soffice (LibreOffice) for PDF and HTML conversions, scripts/thumbnail.py uses pdftoppm for image generation, and ooxml/scripts/validation/redlining.py uses git diff for content comparison. These calls are restricted to functional requirements and use standard system tools.
  • [EXTERNAL_DOWNLOADS]: The skill's documentation and setup instructions reference several well-known third-party libraries and system packages. This includes Python packages like markitdown and defusedxml, and Node.js packages like pptxgenjs, playwright, and sharp. These dependencies are standard for the skill's stated purpose of document manipulation and rendering.
  • [REMOTE_CODE_EXECUTION]: The skill uses Playwright (html2pptx.js) to render HTML content in a headless browser to calculate layout positions for PowerPoint elements. While this involve browser automation, it is a local operation intended for layout extraction and does not involve executing untrusted remote code.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 19, 2026, 05:46 AM