pptx
Pass
Audited by Gen Agent Trust Hub on Apr 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes
subprocess.runto interact with system utilities such assoffice(LibreOffice),pdftoppm(Poppler), andgit. These tools are used for converting presentations to PDF, generating thumbnail grids, and performing word-level diffing for tracked changes validation. These operations are restricted to specific system binaries and are essential for the skill's primary functionality. - [EXTERNAL_DOWNLOADS]: The skill relies on several well-known third-party dependencies including
markitdownfor text extraction,pptxgenjsfor presentation generation, andplaywrightfor HTML-to-PPTX conversion. All referenced packages are standard industry libraries sourced from trusted registries (NPM and PyPI). - [SAFE]: The skill implements secure XML parsing by using the
defusedxmllibrary in its processing scripts, effectively mitigating risks from XML-based attacks like Billion Laughs or XML External Entity (XXE) vulnerabilities when handling user-provided Office documents.
Audit Metadata