MS-PPT-Style: Morgan Stanley PPT Generator

AdvisoryAudited by Static analysis on May 8, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Presentations created with this skill may appear more official or affiliated than intended, creating trust, compliance, or impersonation risk.

Why it was flagged

The skill is described as a style generator, but generated files are given an official-sounding Morgan Stanley author value, which could make recipients believe the deck came from Morgan Stanley.

Skill content
pres.author = 'Morgan Stanley Research';
Recommendation

Do not use false institutional authorship. Change the default author to the actual user or organization, and add a clear disclaimer if the skill is only imitating a visual style.

What this means

Installing later dependency versions could change behavior if the upstream package changes or is compromised.

Why it was flagged

The skill depends on an external npm package using a version range. This is expected for PPTX generation, but the artifacts do not include a lockfile or pinned dependency.

Skill content
"dependencies": {
    "pptxgenjs": "^3.12.0"
  }
Recommendation

Install from a trusted npm registry and consider pinning dependencies with a lockfile for reproducible installs.