pptx
Pass
Audited by Gen Agent Trust Hub on Mar 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes Python's
subprocess.runto interact with system-level utilities for document conversion and validation. These calls are implemented securely using argument lists and avoiding shell execution.scripts/thumbnail.pyexecutessofficeandpdftoppmto generate slide images.ooxml/scripts/pack.pyusessofficeto validate the integrity of repacked documents.ooxml/scripts/validation/redlining.pyusesgit diffto provide precise comparisons of document revisions. - [EXTERNAL_DOWNLOADS]: The skill manages dependencies through standard package managers and provides instructions for installing required system tools. Node.js dependencies are defined in
package.json. Python scripts use PEP 723 inline metadata for dependency management. Official system tools like LibreOffice and Poppler are recommended for installation via standard package managers. - [SAFE]: The skill demonstrates a strong commitment to security through its choice of libraries and validation logic. XML parsing across the OOXML scripts is handled by
defusedxmlto prevent XXE attacks. The code includes extensive validation checks for document structure, slide layout IDs, and notes slide references to ensure the generated presentations are not corrupt.
Audit Metadata