pptx
Warn
Audited by Gen Agent Trust Hub on Apr 13, 2026
Risk Level: MEDIUMREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The utility script
scripts/office/soffice.pyperforms runtime compilation and process injection. - It writes a C source string to a temporary file and compiles it into a shared object (
.so) usinggcc. - It uses the
LD_PRELOADenvironment variable to inject this library into thesoffice(LibreOffice) process to shim network socket functionality. - [COMMAND_EXECUTION]: The skill uses
subprocess.runto execute several system commands for its primary operations: gccis invoked inscripts/office/soffice.pyto compile the compatibility shim.soffice(LibreOffice) is executed inscripts/office/soffice.pyandscripts/thumbnail.pyto convert presentations to PDF format.pdftoppm(Poppler) is invoked inscripts/thumbnail.pyto rasterize slides from PDF into image format for thumbnails.git diffis used inscripts/office/validators/redlining.pyto generate word-level differences between document revisions.
Audit Metadata