Security audit
Security checks across malware telemetry and agentic risk
The skill appears to be a real PPT compression tool, but it needs review because it can change the Python environment and download executable ffmpeg binaries without integrity checks.
Install only if you are comfortable running local Python code that processes your PPT files and may install dependencies. Prefer using a trusted system ffmpeg or verifying downloaded ffmpeg binaries yourself, install Pillow explicitly in a virtual environment, and avoid following python -c templates with untrusted filenames or message text.
except ImportError:
print("[INFO] Pillow not found. Installing...")
try:
result = subprocess.run(
[sys.executable, '-m', 'pip', 'install', 'Pillow', '-q'],
capture_output=True, text=True, timeout=120
)65/65 vendors flagged this skill as clean.
No suspicious patterns detected.