md-ppt-generator

Security checks across static analysis, malware telemetry, and agentic risk

Overview

This is a coherent instruction-only Markdown-to-HTML slide generator; its only notable behavior is expected inline presentation JavaScript in the generated index.html.

This skill appears safe and purpose-aligned for generating local HTML slides. Before installing, note that the output HTML contains inline slideshow JavaScript and should be reviewed if the source Markdown comes from someone you do not trust or if you plan to publish the generated file.

Static analysis

No static analysis findings were reported for this release.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Opening the generated index.html will run presentation JavaScript in the browser to control the slideshow UI.

Why it was flagged

The generated HTML template includes inline JavaScript for navigation, scrolling, keyboard controls, progress updates, and animation delays. This is expected for an interactive slideshow and shows no network, credential, or destructive behavior.

Skill content
<script> ... dot.addEventListener('click', () => { sections[index].scrollIntoView({ behavior: 'smooth' }); }); ... window.addEventListener('keydown', (e) => { ... });
Recommendation

Use trusted Markdown inputs where possible, and inspect the generated HTML before publishing or opening decks created from untrusted content.