pptx
Pass
Audited by Gen Agent Trust Hub on Feb 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION] (LOW): The skill provides instructions for manual OpenXML editing using system shell commands (
unzipandzip). While these are standard tools for advanced document manipulation, they involve shell-level interaction. - [EXTERNAL_DOWNLOADS] (SAFE): The skill utilizes the standard
python-pptxlibrary and references other reputable tools like Pandoc and LibreOffice. - [PROMPT_INJECTION] (LOW): The skill processes external, potentially untrusted
.pptxfiles, creating a surface for indirect prompt injection. - Ingestion points: Loading external presentations via
Presentation('existing.pptx')orPresentation('template.pptx'). - Boundary markers: No boundary markers or explicit safety instructions are used when extracting or iterating over slide text content.
- Capability inventory: The skill has capabilities for file system read/write and executing shell commands (zip/unzip).
- Sanitization: No sanitization or content validation is performed on the text extracted from input files.
Audit Metadata