ClawHub
Back to skill

Security audit

Ai Slides Zh

Security checks across malware telemetry and agentic risk

Overview

This Chinese slide-generation skill only instructs an agent to create PowerPoint presentations and shows no hidden code, credential use, persistence, or unrelated access.

Install only if you want a Chinese-language PPT generation helper. Confirm the referenced office-mcp server is the trusted Office tool you intended to use, and review generated slides before sharing, especially when using business, training, or other sensitive content.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Vague Triggers

Medium
Confidence
91% confidence
Finding
The trigger phrases listed in the description are very broad, generic productivity requests such as '做PPT' and '生成幻灯片', which can overlap with many normal user intents. This can cause unintended skill activation, routing users into this skill when they did not explicitly choose it, creating confusion and potentially causing unwanted document generation or tool use.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.