pptx
Pass
Audited by Gen Agent Trust Hub on Apr 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes system utilities like soffice (LibreOffice), pdftoppm, and git via Python's subprocess.run module. The implementation uses list-based arguments to avoid shell execution, which is a secure practice that prevents command injection vulnerabilities.- [EXTERNAL_DOWNLOADS]: The documentation provides instructions to install necessary dependencies from public registries (NPM and PyPI). These include reputable packages such as playwright, sharp, python-pptx, and markitdown for document processing and rendering.- [SAFE]: The skill demonstrates secure coding practices by utilizing the defusedxml library for XML parsing in the unpacking and packing scripts, mitigating the risk of XML-based attacks such as XXE. The use of Playwright for HTML rendering is confined to local file paths generated during the workflow.
Audit Metadata