pptx

Pass

Audited by Gen Agent Trust Hub on Mar 27, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes Python's subprocess.run to interact with system-level utilities for document conversion and validation. These calls are implemented securely using argument lists and avoiding shell execution. scripts/thumbnail.py executes soffice and pdftoppm to generate slide images. ooxml/scripts/pack.py uses soffice to validate the integrity of repacked documents. ooxml/scripts/validation/redlining.py uses git diff to provide precise comparisons of document revisions.
  • [EXTERNAL_DOWNLOADS]: The skill manages dependencies through standard package managers and provides instructions for installing required system tools. Node.js dependencies are defined in package.json. Python scripts use PEP 723 inline metadata for dependency management. Official system tools like LibreOffice and Poppler are recommended for installation via standard package managers.
  • [SAFE]: The skill demonstrates a strong commitment to security through its choice of libraries and validation logic. XML parsing across the OOXML scripts is handled by defusedxml to prevent XXE attacks. The code includes extensive validation checks for document structure, slide layout IDs, and notes slide references to ensure the generated presentations are not corrupt.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 27, 2026, 08:02 PM