pptx

Pass

Audited by Gen Agent Trust Hub on Jun 13, 2026

Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill uses runtime code generation and process injection to manage its dependencies.
  • The file scripts/office/soffice.py contains a C source code literal used to shim socket operations for sandboxed environments.
  • The script executes gcc to compile this source into a shared library file on the fly.
  • It then employs LD_PRELOAD to inject this compiled shim into the soffice process, altering its standard library calls.
  • [COMMAND_EXECUTION]: The skill relies on several external system binaries to perform its functions.
  • scripts/office/soffice.py executes the gcc compiler and the soffice (LibreOffice) binary.
  • scripts/thumbnail.py invokes soffice for PDF conversion and pdftoppm for image rasterization of slides.
  • scripts/office/validators/redlining.py utilizes the git diff command to facilitate document comparison for tracked changes.
  • While these calls are parameterized and lack shell=True, they represent a broad execution surface integrated into the skill's logic.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 13, 2026, 06:24 AM