DeckCraft

• Outcome: Pass
• Latest audit: Jun 11, 2026 · 1:41 PM UTC
• Version: 6.0.0

Overview

This appears to be a legitimate PowerPoint generation skill, with the main caution being normal document/image parsing dependency hygiene.

Install this as a normal document-generation tool, but keep its Python dependencies updated or pinned through a lockfile, and avoid feeding it untrusted PDFs, DOCX files, or images in a sensitive environment unless those parsers are current and isolated.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (4)

Known Vulnerable Dependency: lxml — 10 advisory(ies): CVE-2021-43818 (lxml's HTML Cleaner allows crafted and SVG embedded scripts to pass through); CVE-2014-3146 (lxml Cross-site Scripting Via Control Characters); CVE-2021-28957 (lxml vulnerable to Cross-Site Scripting ) +7 more

High

• Category: Supply Chain
• Confidence: 91% confidence
• Finding: The requirement permits installing lxml versions affected by known security advisories, and this skill processes imported document content where XML/HTML parsing is security-relevant. In a presentation-generation workflow that may ingest external files, vulnerable parser behavior can enable XSS-like sanitization bypasses, parser abuse, or other downstream document-processing attacks depending on how lxml is used.

Known Vulnerable Dependency: Pillow — 10 advisory(ies): CVE-2016-2533 (Pillow buffer overflow in ImagingPcdDecode); CVE-2023-50447 (Arbitrary Code Execution in Pillow); CVE-2021-27922 (Pillow Uncontrolled Resource Consumption) +7 more

Critical

• Category: Supply Chain
• Confidence: 95% confidence
• Finding: The requirement allows vulnerable Pillow versions, and this skill handles presentation/media generation where image parsing is likely routine. Image-processing libraries are high-risk because crafted files can trigger code execution, memory corruption, or denial of service during normal processing, making this especially dangerous for a tool that may open untrusted assets.

Known Vulnerable Dependency: PyMuPDF — 1 advisory(ies): CVE-2026-3029 (PyMuPDF has a path traversal in _main_.py)

Low

• Category: Supply Chain
• Confidence: 60% confidence
• Finding: The dependency may include a version affected by the cited PyMuPDF path traversal issue, but the reported issue appears tied to command-line entry behavior rather than core library use. In this skill, PyMuPDF is present for PDF parsing, so exploitability depends on whether the vulnerable code path is actually exposed by the application.

Known Vulnerable Dependency: python-docx — 2 advisory(ies): CVE-2016-5851 (Improper Restriction of XML External Entity Reference in python-docx); CVE-2016-5851 (python-docx before 0.8.6 allows context-dependent attackers to conduct XML Exter)

High

• Category: Supply Chain
• Confidence: 93% confidence
• Finding: The requirement permits python-docx versions with a known XXE issue, and this skill explicitly imports DOCX files, which makes the dependency context materially more dangerous. A malicious document could exploit unsafe XML entity handling to read local files, trigger SSRF-like network access, or otherwise abuse document parsing during normal use.

VirusTotal

65/65 vendors flagged this skill as clean.

Static analysis

No suspicious patterns detected.