image-to-editable-ppt

Pass

Audited by Gen Agent Trust Hub on Jul 19, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The CLI tool editppt uses subprocess.run to coordinate internal Python scripts and invoke local system utilities for document processing. This includes using LibreOffice (soffice) for PDF/PPT conversion, ImageMagick (magick) for image manipulation, and TeX engines (xelatex, pdflatex) for rendering LaTeX formulas into high-fidelity assets.
  • [EXTERNAL_DOWNLOADS]: The skill makes network requests to external APIs required for slide analysis and asset creation. It specifically communicates with Baidu's AI Studio (paddleocr.aistudio-app.com) for OCR tasks and OpenAI/Codex endpoints for image generation and editing.
  • [DATA_EXPOSURE]: The skill is configured to read from the local path ~/.codex/auth.json to retrieve authentication tokens needed to authorize requests to the Codex image generation backend, which is a standard method for managing session-based credentials for this service.
  • [PROMPT_INJECTION]: By processing text from user-provided images through OCR and passing it to sub-agents for reconstruction, the skill possesses an indirect prompt injection surface. The skill mitigates this through a structured workflow that translates visual data into JSON manifests rather than directly executing raw OCR output as commands.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 19, 2026, 08:24 AM
Security Audit — agent-trust-hub — image-to-editable-ppt