MS-PPT-Style: Morgan Stanley PPT Generator

ReviewAudited by ClawScan on May 10, 2026.

Overview

The skill mostly matches its PPT-generation purpose, but it can label generated decks as authored by “Morgan Stanley Research,” which could mislead recipients.

Review and change the default presentation author before using this skill. It appears safe from a local security perspective, but generated decks should not imply Morgan Stanley affiliation unless that is accurate and authorized.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Presentations created with this skill may appear more official or affiliated than intended, creating trust, compliance, or impersonation risk.

Why it was flagged

The skill is described as a style generator, but generated files are given an official-sounding Morgan Stanley author value, which could make recipients believe the deck came from Morgan Stanley.

Skill content
pres.author = 'Morgan Stanley Research';
Recommendation

Do not use false institutional authorship. Change the default author to the actual user or organization, and add a clear disclaimer if the skill is only imitating a visual style.

What this means

Installing later dependency versions could change behavior if the upstream package changes or is compromised.

Why it was flagged

The skill depends on an external npm package using a version range. This is expected for PPTX generation, but the artifacts do not include a lockfile or pinned dependency.

Skill content
"dependencies": {
    "pptxgenjs": "^3.12.0"
  }
Recommendation

Install from a trusted npm registry and consider pinning dependencies with a lockfile for reproducible installs.