Security audit
Security checks for vulnerabilities and agentic risk
This is a real PowerPoint-generation skill, but its advanced routes can run model- or caller-supplied Python with broad local authority.
Install only if you are comfortable with a local PPT-generation tool that runs LibreOffice/Poppler and writes task artifacts. Use the default declarative workflow for ordinary decks. Do not invoke Bespoke, refine-code, or model-authored template component routes unless the Python script is from a trusted source and you are willing for it to run with the agent process's local file and environment access.
This finding alleges sandbox probing, loopback connectivity testing, and Unix socket IPC under a benign PPT authoring description. If accurate, concealed environment probing and local network or IPC testing exceed expected scope and can be used to map defenses, discover internal services, or facilitate lateral interaction inside the host environment.
This finding alleges sandbox probing, loopback connectivity testing, and Unix socket IPC under a benign PPT authoring description. If accurate, concealed environment probing and local network or IPC testing exceed expected scope and can be used to map defenses, discover internal services, or facilitate lateral interaction inside the host environment.
This finding alleges sandbox probing, loopback connectivity testing, and Unix socket IPC under a benign PPT authoring description. If accurate, concealed environment probing and local network or IPC testing exceed expected scope and can be used to map defenses, discover internal services, or facilitate lateral interaction inside the host environment.
This finding alleges sandbox probing, loopback connectivity testing, and Unix socket IPC under a benign PPT authoring description. If accurate, concealed environment probing and local network or IPC testing exceed expected scope and can be used to map defenses, discover internal services, or facilitate lateral interaction inside the host environment.
This finding alleges sandbox probing, loopback connectivity testing, and Unix socket IPC under a benign PPT authoring description. If accurate, concealed environment probing and local network or IPC testing exceed expected scope and can be used to map defenses, discover internal services, or facilitate lateral interaction inside the host environment.
This finding alleges sandbox probing, loopback connectivity testing, and Unix socket IPC under a benign PPT authoring description. If accurate, concealed environment probing and local network or IPC testing exceed expected scope and can be used to map defenses, discover internal services, or facilitate lateral interaction inside the host environment.
This finding alleges sandbox probing, loopback connectivity testing, and Unix socket IPC under a benign PPT authoring description. If accurate, concealed environment probing and local network or IPC testing exceed expected scope and can be used to map defenses, discover internal services, or facilitate lateral interaction inside the host environment.
This finding alleges sandbox probing, loopback connectivity testing, and Unix socket IPC under a benign PPT authoring description. If accurate, concealed environment probing and local network or IPC testing exceed expected scope and can be used to map defenses, discover internal services, or facilitate lateral interaction inside the host environment.
This finding alleges sandbox probing, loopback connectivity testing, and Unix socket IPC under a benign PPT authoring description. If accurate, concealed environment probing and local network or IPC testing exceed expected scope and can be used to map defenses, discover internal services, or facilitate lateral interaction inside the host environment.
This finding alleges sandbox probing, loopback connectivity testing, and Unix socket IPC under a benign PPT authoring description. If accurate, concealed environment probing and local network or IPC testing exceed expected scope and can be used to map defenses, discover internal services, or facilitate lateral interaction inside the host environment.
This finding alleges sandbox probing, loopback connectivity testing, and Unix socket IPC under a benign PPT authoring description. If accurate, concealed environment probing and local network or IPC testing exceed expected scope and can be used to map defenses, discover internal services, or facilitate lateral interaction inside the host environment.
This finding alleges sandbox probing, loopback connectivity testing, and Unix socket IPC under a benign PPT authoring description. If accurate, concealed environment probing and local network or IPC testing exceed expected scope and can be used to map defenses, discover internal services, or facilitate lateral interaction inside the host environment.
This finding alleges sandbox probing, loopback connectivity testing, and Unix socket IPC under a benign PPT authoring description. If accurate, concealed environment probing and local network or IPC testing exceed expected scope and can be used to map defenses, discover internal services, or facilitate lateral interaction inside the host environment.
This finding alleges sandbox probing, loopback connectivity testing, and Unix socket IPC under a benign PPT authoring description. If accurate, concealed environment probing and local network or IPC testing exceed expected scope and can be used to map defenses, discover internal services, or facilitate lateral interaction inside the host environment.
This finding alleges sandbox probing, loopback connectivity testing, and Unix socket IPC under a benign PPT authoring description. If accurate, concealed environment probing and local network or IPC testing exceed expected scope and can be used to map defenses, discover internal services, or facilitate lateral interaction inside the host environment.
This finding alleges sandbox probing, loopback connectivity testing, and Unix socket IPC under a benign PPT authoring description. If accurate, concealed environment probing and local network or IPC testing exceed expected scope and can be used to map defenses, discover internal services, or facilitate lateral interaction inside the host environment.
This finding alleges sandbox probing, loopback connectivity testing, and Unix socket IPC under a benign PPT authoring description. If accurate, concealed environment probing and local network or IPC testing exceed expected scope and can be used to map defenses, discover internal services, or facilitate lateral interaction inside the host environment.
This finding alleges sandbox probing, loopback connectivity testing, and Unix socket IPC under a benign PPT authoring description. If accurate, concealed environment probing and local network or IPC testing exceed expected scope and can be used to map defenses, discover internal services, or facilitate lateral interaction inside the host environment.
This finding alleges sandbox probing, loopback connectivity testing, and Unix socket IPC under a benign PPT authoring description. If accurate, concealed environment probing and local network or IPC testing exceed expected scope and can be used to map defenses, discover internal services, or facilitate lateral interaction inside the host environment.
This finding alleges sandbox probing, loopback connectivity testing, and Unix socket IPC under a benign PPT authoring description. If accurate, concealed environment probing and local network or IPC testing exceed expected scope and can be used to map defenses, discover internal services, or facilitate lateral interaction inside the host environment.
This finding alleges sandbox probing, loopback connectivity testing, and Unix socket IPC under a benign PPT authoring description. If accurate, concealed environment probing and local network or IPC testing exceed expected scope and can be used to map defenses, discover internal services, or facilitate lateral interaction inside the host environment.
This finding alleges sandbox probing, loopback connectivity testing, and Unix socket IPC under a benign PPT authoring description. If accurate, concealed environment probing and local network or IPC testing exceed expected scope and can be used to map defenses, discover internal services, or facilitate lateral interaction inside the host environment.
This finding alleges sandbox probing, loopback connectivity testing, and Unix socket IPC under a benign PPT authoring description. If accurate, concealed environment probing and local network or IPC testing exceed expected scope and can be used to map defenses, discover internal services, or facilitate lateral interaction inside the host environment.
This finding alleges sandbox probing, loopback connectivity testing, and Unix socket IPC under a benign PPT authoring description. If accurate, concealed environment probing and local network or IPC testing exceed expected scope and can be used to map defenses, discover internal services, or facilitate lateral interaction inside the host environment.
The CLI explicitly accepts externally supplied Python scripts via the bespoke authoring and refine flows, which means this skill can execute arbitrary code provided by a caller. In the context of a document-to-PPT conversion skill, that materially expands capability beyond data transformation into code execution, creating a high-risk path for arbitrary command execution, file access, and environment compromise if the feature is exposed to untrusted inputs.
Detected: suspicious.dynamic_code_execution
