pptx
Warn
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: MEDIUMDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The script scripts/office/soffice.py generates a C source file at runtime, compiles it using gcc, and then injects the resulting shared object into subprocesses using the LD_PRELOAD environment variable to shim socket calls for sandbox compatibility.
- [DYNAMIC_EXECUTION]: The orchestration documentation (ORCHESTRATION_PPTX.md, ORCHESTRATION_DATA_CHARTS.md) instructs the agent to programmatically generate Python scripts like insert_charts_marp.py and generate_charts.py and execute them for automated presentation assembly.
- [EXTERNAL_DOWNLOADS]: documentation directs the agent to download and install external software at runtime, including global Node.js packages (@marp-team/marp-cli) and Python libraries (python-pptx) from official registries.
- [PRIVILEGE_ESCALATION]: Troubleshooting guidance in ORCHESTRATION_PPTX.md suggests using sudo to resolve permission issues encountered during global package installation.
- [COMMAND_EXECUTION]: Several scripts (scripts/thumbnail.py, scripts/office/soffice.py, scripts/office/validators/redlining.py) use subprocess.run to execute system commands such as soffice, pdftoppm, gcc, and git.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted PowerPoint XML data. Ingestion points: XML slide files in ppt/slides/ (processed in pack.py/unpack.py). Boundary markers: Absent. Capability inventory: subprocess.run (soffice.py), file system access (pack.py). Sanitization: The skill uses the defusedxml library for XML parsing to mitigate common XML attacks.
Audit Metadata