pptx

• Risk level: Low
• Analyzed: Apr 15, 2026, 11:28 AM
• Findings: 0
• Version: 0.1.0

Overview

The skill's code, files, and instructions are consistent with a .pptx creation/validation/editing tool and do not request unrelated secrets or external installs; it does perform local file I/O and spawns local tools (soffice, git, Node/Sharp) which you should be aware of before running.

This skill appears to do exactly what it says: convert, inspect, edit, and validate .pptx files using included Python/JS scripts. Before using it: 1) Review and be comfortable with the license (restrictive, proprietary terms in LICENSE.txt). 2) Understand it will read/write the files you point it at and may run local programs (soffice, git) and Node tools (sharp, playwright, pptxgenjs) — install those only from trusted sources. 3) Avoid pointing it at sensitive system directories; run on copies of documents to avoid accidental corruption (pack.py has a --force that skips validation). 4) If you need to audit for exfiltration, note there are no network calls in the provided code, but the scripts invoke subprocesses and write files locally — confirm your environment's PATH/binaries are trusted. 5) If you want higher assurance, inspect the remaining omitted files (the SKILL.md referenced 'remaining files truncated') for any unexpected network or credential usage.