skills/microsoft/hve-core/powerpoint/Gen Agent Trust Hub

powerpoint

Pass

Audited by Gen Agent Trust Hub on Mar 11, 2026

Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • Dynamic Local Script Execution: The build_deck.py script is designed to load and execute an optional Python file named content-extra.py from the content directory during the slide building process. While this provides a flexible extension point for complex drawings, it allows for arbitrary code execution from the content source.
  • External Setup Script Downloads: The skill documentation and orchestrator scripts provide instructions to download and execute installation scripts for the uv package manager from its official domain (astral.sh). This is used for environment preparation but involves executing code from a remote source.
  • Automated Permission Management: The vision validation script (validate_slides.py) utilizes a configuration that automatically handles permission requests when interacting with the Copilot SDK. This streamlines the automated inspection of slide quality.
  • System Utility Orchestration: The orchestrator scripts and Python logic make subprocess calls to system tools like LibreOffice and Poppler to perform document conversion and image rendering. This interaction with the operating system is essential for generating visual previews of the slide decks.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 11, 2026, 01:57 AM