Security audit

octo PPT

Security checks across malware telemetry and agentic risk

Overview

This appears to be a real PPT-generation skill, but it needs Review because its preview/export server runs as a background LAN-reachable service by default and the network behavior is under-scoped in metadata.

Before installing, understand that this skill may install npm packages, contact npm mirror/npm/GitHub version endpoints, and start a background preview/export server. Use it with non-sensitive decks or set the preview host to loopback-only when possible; review or update the bundled dependencies before use on Windows.

SkillSpector

By NVIDIA

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access

Findings (3)

Lp3

Medium

Category: MCP Least Privilege
Confidence: 90% confidence
Finding: The skill instructs the agent to run network-capable commands such as version checks and local HTTP preview/export services, but it does not declare any corresponding permissions. This creates a capability/permission mismatch: an operator may assume the skill is offline-safe while it can still initiate network activity, increasing the chance of unintended outbound requests or exposure of local services.

Hidden Instructions

High

Category: Prompt Injection
Content: ��B��'��Q�&&�@Ӂ��2c�PƢ� ��r�ȧ�8 M�*ݠ�L ;��1r��y,��H&%yɋ�rJI�k^� C��c9TI��J�L�S�� 월�!��0J�, ��.)*sK� Bf 3�}��m�ѓ��}��?��|�� d�dza�9� �0��4N�� CBL��A8/��y�[q8��k^)E��9�ʢ�X ʮRQ��'�5��t��(e�R�Q�7�;�=YrN,��ņ��&�:��l�q�y+�8��
Confidence: 94% confidence
Finding: ⁦

Known Vulnerable Dependency: esbuild==0.28.0 — 1 advisory(ies): GHSA-g7r4-m6w7-qqqr (esbuild allows arbitrary file read when running the development server on Window)

Low

Category: Supply Chain
Confidence: 84% confidence
Finding: esbuild==0.28.0

VirusTotal

VirusTotal findings are pending for this skill version.

Static analysis

Detected: suspicious.dangerous_exec, suspicious.insecure_tls_verification

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: project/scripts/chrome-path.mjs:19

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: project/scripts/export-pptx.mjs:71

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: project/scripts/openssl-path.mjs:15

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: project/scripts/preview-freshness.mjs:48

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: project/scripts/preview/tls.mjs:18

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: project/scripts/stage-media.mjs:297

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: project/scripts/start-preview-server.mjs:63

HTTPS certificate verification is disabled.

Warn

Code: suspicious.insecure_tls_verification
Location: project/scripts/start-preview-server.mjs:465