skills/agentscope-ai/copaw/pptx/Gen Agent Trust Hub

pptx

Warn

Audited by Gen Agent Trust Hub on Apr 8, 2026

Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/office/soffice.py performs runtime compilation of a C library. It writes source code to a temporary file, compiles it using gcc, and then uses the LD_PRELOAD environment variable to inject the resulting shared object into the LibreOffice (soffice) process. This mechanism is designed to shim system socket calls in restricted environments.
  • [COMMAND_EXECUTION]: Several scripts in the skill execute system utilities via subprocess.run. This includes soffice for document conversion in scripts/office/soffice.py and scripts/thumbnail.py, pdftoppm for thumbnail generation in scripts/thumbnail.py, and git for tracked changes validation in scripts/office/validators/redlining.py.
  • [EXTERNAL_DOWNLOADS]: The skill documentation lists several required external dependencies that are not included with the skill itself. These include system utilities like LibreOffice and poppler-utils, as well as several Python and Node.js packages that must be installed via pip or npm.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Apr 8, 2026, 04:27 PM