ClawHub
Back to skill

Security audit

Presentation MD

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed presentation-deck generator with optional export and public sharing features, not hidden or unrelated behavior.

Install only if you are comfortable with a deck tool that can install Node-based rendering dependencies, use browser automation for PDF export, and optionally deploy decks to Vercel. Treat deployment as public sharing: confirm the deck contains no confidential material before allowing a live URL.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Findings (4)

Tp4

High
Category
MCP Tool Poisoning
Confidence
93% confidence
Finding
The skill is presented as a presentation generator, but it also instructs the agent to perform external side effects: deploy content to a public Vercel URL, invoke external services, export via headless browser tooling, and install Playwright/Chromium dependencies. This mismatch is security-relevant because users may invoke a seemingly local content-generation skill without realizing it can publish confidential decks or trigger networked/package-install actions.

Vague Triggers

Medium
Confidence
82% confidence
Finding
The description says the skill should be used for essentially any presentation request, which is broad enough to auto-match many ordinary user prompts. Over-broad invocation increases the chance the skill is selected in contexts where users did not intend its stronger behaviors, including writing files, invoking MCP tools, installing packages, or offering deployment flows.

Unpinned Dependencies

Low
Category
Supply Chain
Content
"private": true,
  "description": "Runtime-only deps for export-pdf.sh — installed on first run, not part of the published skill package.",
  "dependencies": {
    "playwright": "^1.46.0"
  }
}
Confidence
94% confidence
Finding
"playwright": "^1.46.0"

Known Vulnerable Dependency: playwright==1.46.0 — 1 advisory(ies): CVE-2025-59288 (Playwright downloads and installs browsers without verifying the authenticity of)

High
Category
Supply Chain
Confidence
98% confidence
Finding
playwright==1.46.0

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.