image-to-editable-ppt
Pass
Audited by Gen Agent Trust Hub on Jul 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The CLI tool
editpptusessubprocess.runto coordinate internal Python scripts and invoke local system utilities for document processing. This includes using LibreOffice (soffice) for PDF/PPT conversion, ImageMagick (magick) for image manipulation, and TeX engines (xelatex,pdflatex) for rendering LaTeX formulas into high-fidelity assets. - [EXTERNAL_DOWNLOADS]: The skill makes network requests to external APIs required for slide analysis and asset creation. It specifically communicates with Baidu's AI Studio (
paddleocr.aistudio-app.com) for OCR tasks and OpenAI/Codex endpoints for image generation and editing. - [DATA_EXPOSURE]: The skill is configured to read from the local path
~/.codex/auth.jsonto retrieve authentication tokens needed to authorize requests to the Codex image generation backend, which is a standard method for managing session-based credentials for this service. - [PROMPT_INJECTION]: By processing text from user-provided images through OCR and passing it to sub-agents for reconstruction, the skill possesses an indirect prompt injection surface. The skill mitigates this through a structured workflow that translates visual data into JSON manifests rather than directly executing raw OCR output as commands.
Audit Metadata