DeckCraft

PassAudited by ClawScan on May 6, 2026.

Overview

DeckCraft appears purpose-aligned for generating PowerPoint files, with user confirmations, but users should note its local template storage and Python dependency/helper scripts.

DeckCraft looks reasonable for creating presentations. Before installing, be aware that it may store uploaded templates locally for future use and requires installing python-pptx to run its helper scripts. Avoid saving confidential decks as reusable templates unless you manage that local templates folder carefully.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Installing the dependency is necessary for the local scripts, but it adds normal package-supply-chain risk.

Why it was flagged

The skill requires a Python package and includes helper scripts, but the registry install spec is empty. This is expected for a PPT-generation helper, but users should install dependencies from trusted sources.

Skill content
```bash
pip install python-pptx
```
Recommendation

Install python-pptx from a trusted package index and review the included scripts before use, especially because the skill source has no homepage.

What this means

Templates or slide content you upload may remain in the local template library and be reused or referenced later.

Why it was flagged

Uploaded templates can be saved persistently and cataloged for reuse. This is disclosed and aligned with template support, but retained decks/templates may contain sensitive business content.

Skill content
- Directory: `templates/` (user-managed, grows over time)
- Catalog: `templates/README.md` (auto-updated when templates are added)
Recommendation

Only save templates you are comfortable retaining locally, and periodically review or delete the templates/ library if it contains sensitive material.