pptx
Warn
Audited by Gen Agent Trust Hub on Apr 20, 2026
Risk Level: MEDIUMCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
subprocessmodule to execute system commands and performs runtime code generation and process injection. - Process Injection: In
scripts/office/soffice.py, C source code is written to the filesystem, compiled into a shared library usinggcc, and loaded using theLD_PRELOADenvironment variable to shim network socket calls for thesofficebinary. - System Tool Execution: Multiple scripts including
thumbnail.py,preview.py, andredlining.pyexecute binaries such assoffice,pdftoppm, andgitusing arguments derived from user-provided file paths.
Audit Metadata