html-to-pptx

Pass

Audited by Gen Agent Trust Hub on Sep 5, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted HTML files to generate PPTX content.
  • Ingestion points: scripts/to_pptx.py accepts user-provided HTML file paths.
  • Boundary markers: The skill relies on Playwright's browser context, and instructions mention that Chromium sandboxing is enabled by default.
  • Capability inventory: The skill uses subprocess.run to call LibreOffice, performs file system writes, and utilizes Playwright for rendering.
  • Sanitization: Rendering content within a browser context provides initial isolation, but malicious HTML could attempt to influence the agent's behavior if the output is processed further.
  • [COMMAND_EXECUTION]: The visual comparison tool scripts/render_check.py executes the soffice (LibreOffice) command via subprocess.run to convert PPTX files to PDF for rendering.
  • [DYNAMIC_EXECUTION]: The skill uses importlib.util to dynamically load the core conversion logic from local script files (_html_to_pptx.py) and utilizes Playwright's page.evaluate() to execute JavaScript for DOM extraction and manipulation.
  • [EXTERNAL_DOWNLOADS]: During setup, scripts/setup.sh installs Python dependencies from a registry and downloads the Chromium browser binary via Playwright, which is an established development tool.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 5, 2026, 11:21 PM