ClawHub
Back to skill

Security audit

officecli-pitch-deck

Security checks for vulnerabilities and agentic risk

Overview

This skill is a pitch-deck guide that coherently uses OfficeCLI to create PowerPoint files, with a disclosed but potentially risky remote installer step users should review before running.

Install only if you are comfortable using OfficeCLI for local deck generation. Before running the curl or PowerShell installer, inspect the script or use the linked GitHub releases/download channel where possible, and run the skill only on presentation files you intend to create or edit.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (3)

Skill Enumeration

Medium
Category
Agent Snooping
Content
**This skill is a scene layer on top of `officecli-pptx`.** Every pptx hard rule — visual delivery floor (title ≥ 36pt / body ≥ 18pt / title ≥ 2× body), 12-column grid on 33.87×19.05cm, 4 canonical palettes, chart-choice decision table, connector canon (`shape` / `from` / `to` / `tailEnd=triangle`), shell escape, resident + batch, Delivery Gate 1–5a — is inherited, not re-taught. This file adds only what **fundraising** needs on top: stage diagnosis (A / B / C), 5 赛道 arc templates, 10 key-slide recipes (cover / problem / solution / market / product / model / traction / team / financials / ask), pitch-specific numbers convention, a VC ship-check, and a pitch-specific fresh-eyes Gate 6.

When the pptx base rules cover it, the text here says `→ see pptx v2 §X`. Read `skills/officecli-pptx/SKILL.md` first if you have not.

## Setup
Confidence
80% confidence
Finding
The skill explicitly references another internal skill path and instructs the agent/operator to read it first, which discloses environment structure and enables skill enumeration. In isolation this is not code execution, but it can help an attacker map available capabilities and target higher-risk dependent skills for abuse.

Skill Enumeration

Medium
Category
Agent Snooping
Content
## Mental Model & Inheritance

**Inherits pptx v2.** You should have read `skills/officecli-pptx/SKILL.md` first. This skill assumes you know how to: add slides + shapes + charts + connectors; address by `@name=` / `@id=`; quote paths; use `batch` heredocs; write `--prop tailEnd=triangle` on every flow connector; and run the 5-gate Delivery Gate. If any of those are unfamiliar, open a pptx v2 session before continuing.

## Shell & Execution Discipline
Confidence
80% confidence
Finding
This repeated dependency reference again reveals the existence and naming of another skill, contributing to capability discovery and internal layout leakage. Repeated enumeration increases confidence for an attacker about the agent's toolchain and may facilitate chaining into more dangerous instructions in the inherited skill.

External Script Fetching

High
Category
Supply Chain
Content
If `officecli` is missing:

- **macOS / Linux**: `curl -fsSL https://d.officecli.ai/install.sh | bash`
- **Windows (PowerShell)**: `irm https://d.officecli.ai/install.ps1 | iex`

Verify with `officecli --version` (open a new terminal if PATH hasn't picked up). If install fails, download a binary from https://github.com/iOfficeAI/OfficeCLI/releases.
Confidence
99% confidence
Finding
The skill instructs users to fetch and immediately execute remote scripts via `curl | bash` and `irm ... | iex`, which is a classic unsafe supply-chain pattern. If the remote host, TLS path, DNS, release process, or upstream script is compromised, arbitrary code will execute on the user's machine with the user's privileges.

Static analysis

No suspicious patterns detected.