Security audit
Security checks for vulnerabilities and agentic risk
This skill coherently uses OnePress to turn decks into videos, with disclosed account connection, upload, polling, and MP4 download behavior.
Install only if you are comfortable sending deck contents to OnePress for processing and storing a OnePress API key in your agent environment or secret store. Avoid using it for highly sensitive decks unless your OnePress account and workspace policies permit that transfer.
The README instructs users to create and use a raw ONEPRESS_API_KEY, while the skill metadata says authentication should occur through browser-confirmed pairing with no key copying. This mismatch can cause users to expose long-lived credentials unnecessarily, increasing the risk of secret leakage, phishing-style credential collection, or use of a less secure auth path than intended.
Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.
· {"status":"denied"} · {"status":"expired"} (start over)
5. Store `api_key` in the host's secret/env store as `ONEPRESS_API_KEY`. Never
ask the user to paste a key into chat, and never log it. Users can revoke it
anytime in OnePress Settings (or create one manually at
**Settings → Account → API keys**).
Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.
· {"status":"denied"} · {"status":"expired"} (start over)
5. Store `api_key` in the host's secret/env store as `ONEPRESS_API_KEY`. Never
ask the user to paste a key into chat, and never log it. Users can revoke it
anytime in OnePress Settings (or create one manually at
**Settings → Account → API keys**).
The skill directs the agent to upload a local deck file to OnePress, but it does not require an explicit user-facing disclosure or confirmation that the file contents will be transmitted to a third-party service. This can lead to unintended exfiltration of sensitive slide content, especially when users may assume the agent is operating locally or may not realize the full file is being sent off-platform.
The skill instructs downloading the generated MP4 and saving it to the user's working directory without an explicit notice or confirmation about the local file write. While lower risk than data exfiltration, silent writes can surprise users, overwrite expected workspace contents, or create privacy issues if the environment is shared or monitored.
No suspicious patterns detected.