pptx
Pass
Audited by Gen Agent Trust Hub on Jun 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes system utilities through the
subprocess.runinterface. This includes executingsoffice(LibreOffice) for document conversions,pdftoppmfor image generation, andgitfor diffing documents. A notable technical detail inscripts/office/soffice.pyis the dynamic compilation of an embedded C source string usinggccto create a shared library loaded viaLD_PRELOAD; this is used to shim network sockets for compatibility in restricted execution environments. - [EXTERNAL_DOWNLOADS]: The skill references several external dependencies required for full functionality, including Python packages like
markitdownandPillow, and Node.js packages such aspptxgenjs,react-icons, andsharp. It also requires system-level installations of LibreOffice and Poppler utilities. - [PROMPT_INJECTION]: The skill is designed to ingest and parse untrusted data from external
.pptxfiles. Although it employsdefusedxmlto protect against standard XML vulnerabilities, the extracted text content is interpolated into the agent's context. This creates an attack surface for indirect prompt injection, where malicious instructions embedded in a slide deck could influence the agent's future behavior.
Audit Metadata