Slide Writer

• Outcome: Review
• Latest audit: May 28, 2026 · 1:14 PM UTC
• Version: 1.0.0

Overview

The slide generator itself is coherent, but it needs review because it silently self-updates from GitHub and bundles an unrelated Sonos-control skill.

Review before installing. The core slide-generation behavior appears useful and not malicious, but install only if you are comfortable with the skill contacting GitHub and changing its local checkout on every run. Consider removing or disabling the mandatory git pull step and the unrelated skills/sonoscli directory before use, and be aware that some example decks may load Google Fonts when opened.

SkillSpector

Vulnerability Patterns

• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep
• Memory Poisoning: Persistent Context Injection, Context Window Stuffing, Memory Manipulation
• Taint Tracking: Direct Taint Flow, Variable-Mediated Taint Flow, Credential Exfiltration Chain
• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration

Findings (186)

Tainted flow: 'updated' from pathlib.Path.read_text (line 259, file read) → pathlib.Path.write_text (file write)

Medium

• Category: Data Flow

Content

print("ERROR: #globalLogoGroup block not found", file=sys.stderr)
        return 1
    updated = LOGO_BLOCK_RE.sub(logo_block, updated, count=1)
    html_path.write_text(updated, encoding="utf-8")

    print(f"Updated branding in {html_path}")
    print(f"title: {final_title}")

• Confidence: 65% confidence
• Finding: Data from a source is assigned to a variable that is later passed to a sink, creating a variable-mediated taint flow.

Lp3

Medium

• Category: MCP Least Privilege
• Confidence: 70% confidence
• Finding: Without declared permissions the skill's intent is opaque and cannot be validated.

Context-Inappropriate Capability

Medium

• Confidence: 89% confidence
• Finding: The manifest describes a skill for turning ideas or documents into enterprise HTML presentations. In contrast, the documented workflow mandates running `git pull --ff-only` before doing any work, which is a repository/network maintenance capability not justified by the presentation-authoring purpose.

Context-Inappropriate Capability

Medium

• Confidence: 86% confidence
• Finding: The manifest says the skill converts input into a single HTML presentation file. Requiring `open [文件名].html` to launch a browser introduces local application execution beyond generating the artifact, and that capability is not justified by the stated purpose alone.

Context-Inappropriate Capability

Low

• Confidence: 86% confidence
• Finding: 该技能清单描述聚焦于把内容生成/整理成 HTML 演示文稿，但本文件在 L0007-L0009 预连接并加载 Google Fonts。对一个静态本地 HTML 演示样例而言，远程字体依赖并非该技能目的的直接必要能力，且会带来额外的网络访问行为。

Context-Inappropriate Capability

Low

• Confidence: 86% confidence
• Finding: 该文件是一个示例 HTML 演示文稿，而代码在 L0007-L0009 主动从 fonts.googleapis.com 与 fonts.gstatic.com 拉取外部字体资源。对一个本地示例演示文稿而言，这引入了网络访问能力与第三方依赖，虽然有助于视觉呈现，但并不是其声明目的“把内容变成 HTML 演示文稿”的必需部分。

Context Window Stuffing

Medium

• Category: Memory Poisoning

Content

<div class="progress-bar" id="progressBar"></div>

<div id="globalLogoGroup" class="logo-group-single">
    <img class="logo-light" src="data:image/png;base64,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
...[truncated 27 chars]

• Confidence: 80% confidence
• Finding: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Context Window Stuffing

Medium

• Category: Memory Poisoning

Content

<div id="globalLogoGroup" class="logo-group-single">
    <img class="logo-light" src="data:image/png;base64,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
...[truncated 27 chars]

• Confidence: 80% confidence
• Finding: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Context Window Stuffing

Medium

• Category: Memory Poisoning

Content

<div class="progress-bar" id="progressBar"></div>

<div id="globalLogoGroup" class="logo-group-single">
    <img class="logo-light" src="data:image/png;base64,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
...[truncated 28 chars]

• Confidence: 80% confidence
• Finding: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Context Window Stuffing

Medium

• Category: Memory Poisoning

Content

<div class="progress-bar" id="progressBar"></div>

<div id="globalLogoGroup" class="logo-group-single">
    <img class="logo-light" src="data:image/png;base64,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
...[truncated 28 chars]

• Confidence: 80% confidence
• Finding: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Context Window Stuffing

Medium

• Category: Memory Poisoning

Content

<div class="progress-bar" id="progressBar"></div>

<div id="globalLogoGroup" class="logo-group-single">
    <img class="logo-light" src="data:image/png;base64,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
...[truncated 28 chars]

• Confidence: 80% confidence
• Finding: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Context Window Stuffing

Medium

• Category: Memory Poisoning

Content

<div class="progress-bar" id="progressBar"></div>

<div id="globalLogoGroup" class="logo-group-single">
    <img class="logo-light" src="data:image/png;base64,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
...[truncated 28 chars]

• Confidence: 80% confidence
• Finding: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Context Window Stuffing

Medium

• Category: Memory Poisoning

Content

<div id="globalLogoGroup" class="logo-group-single">
    <img class="logo-light" src="data:image/png;base64,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
...[truncated 28 chars]

• Confidence: 80% confidence
• Finding: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Context Window Stuffing

Medium

• Category: Memory Poisoning

Content

<div id="globalLogoGroup" class="logo-group-single">
    <img class="logo-light" src="data:image/png;base64,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
...[truncated 28 chars]

• Confidence: 80% confidence
• Finding: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Context Window Stuffing

Medium

• Category: Memory Poisoning

Content

<div id="globalLogoGroup" class="logo-group-single">
    <img class="logo-light" src="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAC4kAAAN5CAYAAAAff58JAAAAAXNSR0IArs4c6QAAAGhlWElmTU0AKgAAAAgABAESAAMAAAABAAEAAAFCAAQAAAABAAALiQFDAAQAAAABAAADeYdpAAQAAAABAAAAPgAAAAAAA6ABAAMAAAABAAEAAKACAAQAAAABAAALiaADAAQAAAABAAADeQAAAADNivreAAABuGlUWHRYTUw6Y29tLmFkb2JlLnhtcAAAAAAAPHg6eG1wbWV0YSB4bWxuczp4PSJhZG9iZTpuczptZXRhLyIgeDp4bXB0az0iWE1QIENvcmUgNi4wLjAiPgogICA8cmRmOlJERiB4bWxuczpyZGY9Imh0dHA6Ly93d3cudzMub3JnLzE5OTkvMDIvMjItcmRmLXN5bnRheC1ucyMiPgogICAgICA8cmRmOkRlc2NyaXB0aW9uIHJkZjphYm91dD0iIgogICAgICAgICAgICB4bWxuczp0aWZmPSJodHRwOi8vbnMuYWRvYmUuY29tL3RpZmYvMS4wLyI+CiAgICAgICAgIDx0aWZmOk9yaWVudGF0aW9uPjE8L3RpZmY6T3JpZW50YXRpb24+CiAgICAgICAgIDx0aWZmOlRpbGVXaWR0aD4yOTUzPC90aWZmOlRpbGVXaWR0aD4KICAgICAgICAgPHRpZmY6VGlsZUxlbmd0aD44ODk8L3RpZmY6VGlsZUxlbmd0aD4KICAgICAgPC9yZGY6RGVzY3JpcHRpb24+CiAgIDwvcmRmOlJERj4KPC94OnhtcG1ldGE+Cq43f1cAAEAASURBVHgB7N1/jC3VfRjwmbu7YCDBxMauYn6Y37+N45LEpo5tcBJSwMDjoRepqty6kUxct4llqiht2j+Q+lNJYzctSFiqVCuNlEqIkAD+mdQixInBMRhs3gMM4QHBxE4cFzCE997u3uk5987ZPe++u7/vj7n3fkaanTNnzpzzPZ/5ce9qzs4WhYkAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAg
...[truncated 28 chars]

• Confidence: 80% confidence
• Finding: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Context Window Stuffing

Medium

• Category: Memory Poisoning

Content

data:image/png;base64,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
...[truncated 27 chars]

• Confidence: 80% confidence
• Finding: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Context Window Stuffing

Medium

• Category: Memory Poisoning

Content

data:image/png;base64,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
...[truncated 28 chars]

• Confidence: 80% confidence
• Finding: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Context Window Stuffing

Medium

• Category: Memory Poisoning

Content

data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAC4kAAAN5CAYAAAAff58JAAAAAXNSR0IArs4c6QAAAGhlWElmTU0AKgAAAAgABAESAAMAAAABAAEAAAFCAAQAAAABAAALiQFDAAQAAAABAAADeYdpAAQAAAABAAAAPgAAAAAAA6ABAAMAAAABAAEAAKACAAQAAAABAAALiaADAAQAAAABAAADeQAAAADNivreAAABuGlUWHRYTUw6Y29tLmFkb2JlLnhtcAAAAAAAPHg6eG1wbWV0YSB4bWxuczp4PSJhZG9iZTpuczptZXRhLyIgeDp4bXB0az0iWE1QIENvcmUgNi4wLjAiPgogICA8cmRmOlJERiB4bWxuczpyZGY9Imh0dHA6Ly93d3cudzMub3JnLzE5OTkvMDIvMjItcmRmLXN5bnRheC1ucyMiPgogICAgICA8cmRmOkRlc2NyaXB0aW9uIHJkZjphYm91dD0iIgogICAgICAgICAgICB4bWxuczp0aWZmPSJodHRwOi8vbnMuYWRvYmUuY29tL3RpZmYvMS4wLyI+CiAgICAgICAgIDx0aWZmOk9yaWVudGF0aW9uPjE8L3RpZmY6T3JpZW50YXRpb24+CiAgICAgICAgIDx0aWZmOlRpbGVXaWR0aD4yOTUzPC90aWZmOlRpbGVXaWR0aD4KICAgICAgICAgPHRpZmY6VGlsZUxlbmd0aD44ODk8L3RpZmY6VGlsZUxlbmd0aD4KICAgICAgPC9yZGY6RGVzY3JpcHRpb24+CiAgIDwvcmRmOlJERj4KPC94OnhtcG1ldGE+Cq43f1cAAEAASURBVHgB7N1/jC3VfRjwmbu7YCDBxMauYn6Y37+N45LEpo5tcBJSwMDjoRepqty6kUxct4llqiht2j+Q+lNJYzctSFiqVCuNlEqIkAD+mdQixInBMRhs3gMM4QHBxE4cFzCE997u3uk5987ZPe++u7/vj7n3fkaanTNnzpzzPZ/5ce9qzs4WhYkAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQI
...[truncated 28 chars]

• Confidence: 80% confidence
• Finding: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Context Window Stuffing

Medium

• Category: Memory Poisoning

Content

data:image/png;base64,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
...[truncated 28 chars]

• Confidence: 80% confidence
• Finding: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Context Window Stuffing

Medium

• Category: Memory Poisoning

Content

data:image/png;base64,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
...[truncated 28 chars]

• Confidence: 80% confidence
• Finding: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Context Window Stuffing

Medium

• Category: Memory Poisoning

Content

data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAC4kAAAN5CAYAAAAff58JAAAAAXNSR0IArs4c6QAAAGhlWElmTU0AKgAAAAgABAESAAMAAAABAAEAAAFCAAQAAAABAAALiQFDAAQAAAABAAADeYdpAAQAAAABAAAAPgAAAAAAA6ABAAMAAAABAAEAAKACAAQAAAABAAALiaADAAQAAAABAAADeQAAAADNivreAAABuGlUWHRYTUw6Y29tLmFkb2JlLnhtcAAAAAAAPHg6eG1wbWV0YSB4bWxuczp4PSJhZG9iZTpuczptZXRhLyIgeDp4bXB0az0iWE1QIENvcmUgNi4wLjAiPgogICA8cmRmOlJERiB4bWxuczpyZGY9Imh0dHA6Ly93d3cudzMub3JnLzE5OTkvMDIvMjItcmRmLXN5bnRheC1ucyMiPgogICAgICA8cmRmOkRlc2NyaXB0aW9uIHJkZjphYm91dD0iIgogICAgICAgICAgICB4bWxuczp0aWZmPSJodHRwOi8vbnMuYWRvYmUuY29tL3RpZmYvMS4wLyI+CiAgICAgICAgIDx0aWZmOk9yaWVudGF0aW9uPjE8L3RpZmY6T3JpZW50YXRpb24+CiAgICAgICAgIDx0aWZmOlRpbGVXaWR0aD4yOTUzPC90aWZmOlRpbGVXaWR0aD4KICAgICAgICAgPHRpZmY6VGlsZUxlbmd0aD44ODk8L3RpZmY6VGlsZUxlbmd0aD4KICAgICAgPC9yZGY6RGVzY3JpcHRpb24+CiAgIDwvcmRmOlJERj4KPC94OnhtcG1ldGE+Cq43f1cAAEAASURBVHgB7N17zDRXeRhwu8amgIGYQFMuAYLrgPEtxgQ7kCKE6wgRNZEqIaFe0ua/Jm36B6qi/lFFqtqqqtpKSEWN1EqFikpRkqpKS5sGpaTBONQkrkMxxgYcY5zExqauoRBuvnx9ntfzfByv932/3X13Z87s/kYaz+yZM+c85zdnL5/32XnPO89CgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIEC
...[truncated 28 chars]

• Confidence: 80% confidence
• Finding: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Context Window Stuffing

Medium

• Category: Memory Poisoning

Content

data:image/png;base64,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
...[truncated 28 chars]

• Confidence: 80% confidence
• Finding: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Context Window Stuffing

Medium

• Category: Memory Poisoning

Content

data:image/png;base64,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
...[truncated 28 chars]

• Confidence: 80% confidence
• Finding: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Hidden Instructions

High

• Category: Prompt Injection

Content

### 两列 / 三列 Grid
```html
<!-- 两列等宽 -->
<div class="two-col">
    <!-- 左列内容 -->
    <!-- 右列内容 -->

• Confidence: 70% confidence
• Finding: Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Hidden Instructions

High

• Category: Prompt Injection

Content

line-height: 1.6;
}
</style>
<!-- %%THEME_STYLE%% -->
<style>
/* ── Large screens (4K+): lift fixed px caps ── */
@media (min-width: 1921px) {

• Confidence: 70% confidence
• Finding: Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Static analysis

No suspicious patterns detected.