image-to-editable-ppt

Pass

Audited by Gen Agent Trust Hub on Jun 13, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill's runtime extensively uses subprocess.run to orchestrate its workflow. This includes converting files using LibreOffice (soffice), rendering LaTeX formulas with system TeX engines (e.g., xelatex, pdflatex), and processing images via ImageMagick (magick/convert). These operations are strictly functional and necessary for transforming visual inputs into PowerPoint objects.
  • [EXTERNAL_DOWNLOADS]: The tool communicates with external APIs to perform image generation and high-quality OCR. Specifically, it targets OpenAI's API (or user-defined proxies) and the Baidu AI Studio PaddleOCR-VL service. These interactions are transparently documented and depend on user-provided API credentials.
  • [CREDENTIALS_SAFE]: The skill includes a robust configuration system for managing API keys. Sensitive tokens are stored in the user's home directory (~/.editppt/config.yaml) with secure file permissions (0600), ensuring that credentials remain private to the local user.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 13, 2026, 01:42 AM
Security Audit — agent-trust-hub — image-to-editable-ppt