pptx
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill specifies dependencies on well-known libraries including python-pptx and pptxgenjs, as well as system tools like LibreOffice (soffice) and Poppler (pdftoppm) for slide rendering. These are standard, reputable tools for document processing.
- [COMMAND_EXECUTION]: The skill utilizes shell commands such as unzip and zip for manipulating the PowerPoint file's OOXML structure and invokes soffice and pdftoppm to generate slide previews. These operations are core to the skill's functionality and are performed on local workspace files.
- [SAFE]: The skill demonstrates high security awareness by explicitly recommending the use of defusedxml or lxml instead of the standard library's xml.etree.ElementTree to prevent XML External Entity (XXE) vulnerabilities during manual slide editing.
Audit Metadata