pptx
Pass
Audited by Gen Agent Trust Hub on Jul 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill interacts with system utilities such as LibreOffice (
soffice) for PDF conversion and Poppler (pdftoppm) for image generation. These calls are implemented using list-based argument structures insubprocess.run, which is the recommended secure method for preventing shell injection vulnerabilities. - Evidence found in
scripts/thumbnail.py,ooxml/scripts/pack.py, andooxml/scripts/validation/redlining.py. - [REMOTE_CODE_EXECUTION]: The skill uses the Playwright library to launch a headless Chromium browser to render HTML slides. This is a legitimate functional requirement for the
html2pptxworkflow, allowing the skill to accurately calculate element positions based on the rendered HTML layout before generating the PowerPoint file. The browser navigates only to local file paths generated by the skill. - Evidence found in
scripts/html2pptx.js. - [SAFE]: The skill correctly implements protections against XML-based attacks (like XXE or entity expansion) by utilizing the
defusedxmllibrary for parsing PowerPoint's underlying Office Open XML components. This indicates a proactive security posture regarding untrusted document input. - Evidence found in
ooxml/scripts/unpack.pyandooxml/scripts/pack.py.
Audit Metadata