pptx

Pass

Audited by Gen Agent Trust Hub on Apr 20, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes subprocess.run to interact with system utilities such as soffice (LibreOffice), pdftoppm (Poppler), and git. These tools are used for converting presentations to PDF, generating thumbnail grids, and performing word-level diffing for tracked changes validation. These operations are restricted to specific system binaries and are essential for the skill's primary functionality.
  • [EXTERNAL_DOWNLOADS]: The skill relies on several well-known third-party dependencies including markitdown for text extraction, pptxgenjs for presentation generation, and playwright for HTML-to-PPTX conversion. All referenced packages are standard industry libraries sourced from trusted registries (NPM and PyPI).
  • [SAFE]: The skill implements secure XML parsing by using the defusedxml library in its processing scripts, effectively mitigating risks from XML-based attacks like Billion Laughs or XML External Entity (XXE) vulnerabilities when handling user-provided Office documents.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 20, 2026, 03:51 AM
Security Audit — agent-trust-hub — pptx