pptx

Warn

Audited by Gen Agent Trust Hub on Apr 13, 2026

Risk Level: MEDIUMREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The utility script scripts/office/soffice.py performs runtime compilation and process injection.
  • It writes a C source string to a temporary file and compiles it into a shared object (.so) using gcc.
  • It uses the LD_PRELOAD environment variable to inject this library into the soffice (LibreOffice) process to shim network socket functionality.
  • [COMMAND_EXECUTION]: The skill uses subprocess.run to execute several system commands for its primary operations:
  • gcc is invoked in scripts/office/soffice.py to compile the compatibility shim.
  • soffice (LibreOffice) is executed in scripts/office/soffice.py and scripts/thumbnail.py to convert presentations to PDF format.
  • pdftoppm (Poppler) is invoked in scripts/thumbnail.py to rasterize slides from PDF into image format for thumbnails.
  • git diff is used in scripts/office/validators/redlining.py to generate word-level differences between document revisions.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Apr 13, 2026, 04:39 PM
Security Audit — agent-trust-hub — pptx