pptx
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local Python scripts (scripts/thumbnail.py, scripts/office/unpack.py, scripts/office/soffice.py) and the pdftoppm utility to process and convert presentation files. These commands are standard for the skill's documented functionality.
- [EXTERNAL_DOWNLOADS]: The skill installs the markitdown[pptx] package from Microsoft, along with Pillow and pptxgenjs. These are well-known libraries from trusted and established sources.
- [INDIRECT_PROMPT_INJECTION]: As the skill is designed to parse and analyze content from external .pptx files, it presents a surface for indirect prompt injection if the files contain malicious instructions.
- Ingestion points: Reading content from user-provided .pptx files using markitdown in SKILL.md.
- Boundary markers: No explicit delimiters or warnings are used when the agent processes the extracted text.
- Capability inventory: Subprocess execution for script running and PDF conversion.
- Sanitization: No validation or filtering of the extracted presentation content is performed before it is used in subsequent prompts.
Audit Metadata