pptx
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- EXTERNAL_DOWNLOADS (LOW): The skill specifies dependencies on 'markitdown', 'Pillow', and 'pptxgenjs'. These are widely used, standard libraries for document processing and image manipulation downloaded from reputable public registries (PyPI and NPM).
- COMMAND_EXECUTION (LOW): The skill utilizes several system-level commands for file conversion ('soffice', 'pdftoppm'), text extraction, and script execution. These operations are conducted locally on files provided by the user to perform the skill's primary function.
- PROMPT_INJECTION (LOW): The skill is susceptible to Indirect Prompt Injection (Category 8) because it processes untrusted user-provided .pptx files and passes the extracted content to subagents for visual and content analysis. * Ingestion points: Reads 'presentation.pptx' through 'markitdown' and converts slides to images for inspection. * Boundary markers: Absent; the skill does not explicitly use delimiters or instructions to ignore embedded commands in the processed data. * Capability inventory: The skill can execute system commands and invoke subagents for visual inspection. * Sanitization: Absent; content is processed directly as text or images without filtering.
Audit Metadata