pptx-mcp-server

The server uses `subprocess.run` to invoke external binaries (LibreOffice, poppler-utils/ImageMagick) for thumbnail generation and document validation. While `shell=False` is the default for `subprocess.run` with list arguments, passing user-controlled file paths (`pptx_path`, `office_file`) to these external tools can introduce a risk of command injection if the filenames themselves are crafted with shell metacharacters and the external tools fail to properly sanitize their arguments. Processing untrusted `.pptx` files is a potential vector for this. However, the project wisely uses `defusedxml` for XML parsing, mitigating common XML-related vulnerabilities.