html-to-pptx
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted HTML files to generate PPTX content.
- Ingestion points:
scripts/to_pptx.pyaccepts user-provided HTML file paths. - Boundary markers: The skill relies on Playwright's browser context, and instructions mention that Chromium sandboxing is enabled by default.
- Capability inventory: The skill uses
subprocess.runto call LibreOffice, performs file system writes, and utilizes Playwright for rendering. - Sanitization: Rendering content within a browser context provides initial isolation, but malicious HTML could attempt to influence the agent's behavior if the output is processed further.
- [COMMAND_EXECUTION]: The visual comparison tool
scripts/render_check.pyexecutes thesoffice(LibreOffice) command viasubprocess.runto convert PPTX files to PDF for rendering. - [DYNAMIC_EXECUTION]: The skill uses
importlib.utilto dynamically load the core conversion logic from local script files (_html_to_pptx.py) and utilizes Playwright'spage.evaluate()to execute JavaScript for DOM extraction and manipulation. - [EXTERNAL_DOWNLOADS]: During setup,
scripts/setup.shinstalls Python dependencies from a registry and downloads the Chromium browser binary via Playwright, which is an established development tool.
Audit Metadata