html2pptx

Pass

Audited by Gen Agent Trust Hub on Jul 12, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • Command Execution: The skill interacts with several local system utilities to perform its tasks. It uses soffice (from LibreOffice) to render PowerPoint files into PDFs for verification, pdffonts to analyze font usage in reference documents, and git to manage versions during automated optimization. These operations are standard for the tool's intended document-processing workflow.
  • External Downloads: To ensure visual fidelity, the skill can automatically download web fonts such as Inter, Source Serif 4, and JetBrains Mono from official GitHub repositories and Google Fonts. These downloads target well-known and reputable service providers.
  • Autonomous Optimization Loop: The auto_fix_loop.py script features an agentic workflow that attempts to automatically resolve visual discrepancies. It operates on an isolated copy of the skill's scripts within a temporary directory to ensure the primary installation remains unchanged. This process uses a sub-agent with restricted capabilities, focusing specifically on refining the rendering logic for the current document.
  • Standard Compliance: The inclusion of XOR-based processing in the font embedding utility follows the technical requirements of the OOXML (Office Open XML) specification, ensuring that embedded fonts are handled correctly by presentation software.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 12, 2026, 02:28 PM
Security Audit — agent-trust-hub — html2pptx