Security audit
Security checks for vulnerabilities and agentic risk
This skill is a straightforward PPTX translation helper with expected local file conversion behavior, though users should limit it to trusted .pptx files and review output paths.
Install only if you are comfortable letting the skill process local .pptx files with python-pptx and LibreOffice. Use trusted presentations, specify output paths deliberately, and do not rely on it for legacy .ppt files despite the broader activation wording.
The skill instructs the agent to execute shell commands and run local scripts, but the manifest does not declare any tool scope or permissions boundaries. This creates an authorization gap where an agent may invoke shell access more broadly than intended, increasing the risk of unsafe command execution on untrusted PPTX inputs or paths.
The manifest says the skill activates for PPT/PPTX files, while the documentation later states that legacy .ppt is not supported. This inconsistency can cause the agent to route unsupported .ppt files into a shell-driven processing flow, leading to failures, unsafe fallback behavior, or accidental invocation of converters on untrusted legacy files.
The file mixes English metadata with user-facing operational instructions in Chinese, including core principles, usage flow, outputs, and cautions. This effectively forces a specific language for understanding and use of the skill without an explicit opt-in or justification, which matches the language/locale policy violation criteria.
The module docstring presents usage and operational notes only in Chinese, which imposes a specific language on users without any opt-in or alternative locale. Under the policy, forced language/locale constraints are a natural-language violation unless the skill offers a choice or clearly justifies the locale restriction.
subprocess module calls execute external commands. Without careful input validation, this enables command injection.
def render_to_png(pptx_path: str, output_dir: str) -> str:
"""Render PPTX to PNG using LibreOffice. Returns PNG path."""
result = subprocess.run(
['libreoffice', '--headless', '--convert-to', 'png',
'--outdir', output_dir, pptx_path],
capture_output=True, text=True, timeout=60
No suspicious patterns detected.