ClawHub
Back to skill

Security audit

corporate-ppt-generator

Security checks across malware telemetry and agentic risk

Overview

The skill is a coherent PowerPoint generator, but it lets inputs select unconfined local template and output paths, so it needs review before installation.

Review before installing. Use this only in a restricted workspace or after adding path validation that rejects absolute paths and '..', confines templates to a trusted template directory, and writes outputs only to an approved output directory. Treat any supplied PPT template as trusted input.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (2)

Lp3

Medium
Category
MCP Least Privilege
Confidence
84% confidence
Finding
The skill advertises file read/write behavior (template loading and PPTX output generation) but does not declare any permissions, which creates a mismatch between the documented capability surface and the security model. In an agent environment, undeclared filesystem access can bypass user expectations and platform controls, and this is more sensitive here because the skill accepts filenames as inputs and writes output files to disk.

Context-Inappropriate Capability

Medium
Confidence
96% confidence
Finding
The handler accepts untrusted `template_file` and `output_filename` values and joins them directly with `skill_root` using `Path /`, which does not confine absolute paths or `..` traversal. An attacker can cause arbitrary local file reads via `Presentation(str(template_path))` and arbitrary file writes via `prs.save(str(output_path))`, which exceeds the skill's intended role of generating branded decks from controlled templates.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.