skills/tokenrhythm/opensquilla/pptx/Gen Agent Trust Hub

pptx

Pass

Audited by Gen Agent Trust Hub on Sep 23, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill implements standard operations for PowerPoint files using well-known libraries such as python-pptx and PptxGenJS. It includes clear boundaries for execution environments and delivery rules.
  • [DYNAMIC_EXECUTION]: The skill generates and executes Python or Node.js code at runtime to perform presentation edits or creation. This is handled securely by recommending disposable temporary directories for dependencies and script execution to avoid polluting the workspace or host environment.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted PowerPoint files which may contain embedded instructions. The skill mitigates risks by recommending the use of defusedxml for manual XML patching and relying on established APIs for text extraction, which minimizes the attack surface.
  • [EXTERNAL_DOWNLOADS]: Dependencies such as python-pptx, PptxGenJS, LibreOffice, and Poppler are standard industry tools. The skill provides instructions for installing these from official package managers (pip, npm, brew, apt).
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 23, 2026, 03:24 AM