X 92bilal26 Pptx

PassAudited by ClawScan on May 1, 2026.

Overview

The skill is coherent for PowerPoint creation and editing, with no credential, network, persistence, or exfiltration behavior shown, but it does run local helper scripts and depends on ambient presentation-processing libraries.

Install this only if you want Claude to work with local PowerPoint files. Expect it to read and write PPTX/XML/media files and run bundled helper code; use a dedicated working folder, verify required packages from trusted sources, and review outputs before distributing them.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Low

#ASI02: Tool Misuse and Exploitation

What this means

Processing a presentation can create or overwrite extracted document component files in the selected output folder.

Why it was flagged

The helper extracts the contents of a user-supplied Office archive into a chosen output directory. This is central to PPTX inspection, but users should direct it to a dedicated workspace.

Skill content

zipfile.ZipFile(input_file).extractall(output_path)

Recommendation

Use a dedicated temporary/output directory when unpacking presentations and avoid running the workflow on files you do not intend the agent to inspect.

Low

#ASI04: Agentic Supply Chain Vulnerabilities

What this means

The skill may use whatever compatible libraries are present in the environment, which can affect reliability and trust in generated output.

Why it was flagged

The documentation relies on globally installed packages even though the registry metadata lists no install spec or required binaries. This is purpose-aligned, but package provenance and versions are not pinned by the skill.

Skill content

These libraries have been globally installed and are available to use:
- `pptxgenjs`
- `playwright`
- `sharp`

Recommendation

Verify that required packages come from trusted sources and use controlled or pinned versions if installing the skill yourself.

Low

#ASI05: Unexpected Code Execution

What this means

Using the skill can run bundled Python or JavaScript helpers that read and write presentation-related files.

Why it was flagged

The skill instructs the agent to run local helper scripts to process presentation files. This is expected for PPTX manipulation, but it is still local code execution.

Skill content

python ooxml/scripts/unpack.py <office_file> <output_dir>

Recommendation

Keep execution limited to the bundled skill scripts and review generated or modified presentations before sharing them.