Skillv1.0.1

ClawScan security

Powerpoint / PPTX · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

BenignMar 11, 2026, 3:33 PM

Verdict: benign
Confidence: high
Model: gpt-5-mini
Summary: The skill's instructions, requirements, and scope match its PowerPoint/PPTX editing purpose and it requests no credentials or installs, so it is internally coherent.
Guidance: This skill is an instruction-only guide for handling .pptx files and is internally consistent and low-risk: it does not install software or request secrets. Before installing, confirm how your agent will open or render PowerPoint files (uploading to a remote service or running local converters may have different privacy implications). If you plan to give the agent access to private decks, make sure the agent prompts before uploading files externally and that any file-handling/execution path is trusted. If you need stricter guarantees, prefer workflows that keep files local and review any concrete implementation code or connectors the agent will use to read or render slides.

Purpose & Capability: okName and description claim PowerPoint/PPTX editing and inspection; the SKILL.md contains detailed, domain-appropriate guidance about reading decks, inventorying templates/placeholders, layout mapping, and visual QA. There are no unrelated binaries, env vars, or installs requested.
Instruction Scope: noteThe instructions are high-quality and focused on PPTX workflows (inspect before edit, inventory templates, preserve masters, run visual QA). They require the agent to read and inspect PPTX artifacts (expected), but are high-level and therefore leave implementation choices (how files are accessed or rendered) to the agent — review how your agent will open or render user files before use.
Install Mechanism: okNo install spec and no code files — instruction-only skill. This minimizes on-disk risk because nothing is downloaded or executed by the skill itself.
Credentials: okThe skill requests no environment variables, credentials, or config paths. That is proportionate for an instruction-only PPTX editing skill.
Persistence & Privilege: okalways is false and autonomous invocation is allowed by default (normal). The skill does not request persistent system presence or elevated privileges.