pptx
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill uses runtime code generation and process injection to manage its dependencies.
- The file
scripts/office/soffice.pycontains a C source code literal used to shim socket operations for sandboxed environments. - The script executes
gccto compile this source into a shared library file on the fly. - It then employs
LD_PRELOADto inject this compiled shim into thesofficeprocess, altering its standard library calls. - [COMMAND_EXECUTION]: The skill relies on several external system binaries to perform its functions.
scripts/office/soffice.pyexecutes thegcccompiler and thesoffice(LibreOffice) binary.scripts/thumbnail.pyinvokessofficefor PDF conversion andpdftoppmfor image rasterization of slides.scripts/office/validators/redlining.pyutilizes thegit diffcommand to facilitate document comparison for tracked changes.- While these calls are parameterized and lack
shell=True, they represent a broad execution surface integrated into the skill's logic.
Audit Metadata