Security audit

PPT to Video Generator

Security checks for vulnerabilities and agentic risk

Overview

The skill does what it says, but its rendering instructions use an unpinned npx package command that can execute changing third-party code on the user's machine.

Review before installing or using on sensitive projects. Prefer pinning Remotion in a package.json with a lockfile and running the local executable in a sandboxed workspace without unnecessary credentials. The Chinese-only output behavior is disclosed, so use this skill only when that matches the intended video language.

A.I.G

Vulnerability Patterns

Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally

Findings (1)

T08 · Insecure Dependencies

Warning

Location: SKILL.md:148
Finding: Unpinned Third-Party Package Execution Through npx
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (3)

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The description states the skill generates videos with Chinese voiceover and synchronized subtitles as part of its default behavior. This is a natural-language locale policy concern because it forces a specific language rather than offering opt-in or indicating the skill is explicitly limited to Chinese-language presentations.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 98% confidence
Finding: The instruction "旁白、字幕均为简体中文" requires narration and subtitles to be in Simplified Chinese with no user opt-in or alternative locale path. This violates the language/locale policy criterion because it imposes a specific language on all uses of the skill.
Content: No source excerpt is available for this finding.

Rp1

Medium

Category: MCP Rug Pull
Confidence: 90% confidence
Finding: The skill invokes npx remotion without pinning an exact package version, which makes builds non-reproducible and exposes execution to upstream package changes or a compromised dependency release. In a skill that users may run directly on their systems or VPS instances, this creates a real supply-chain risk because arbitrary code from the fetched package can execute during install/render.
Content: No source excerpt is available for this finding.