ClawHub
Back to skill

Security audit

pptx-craft

Security checks for vulnerabilities and agentic risk

Overview

The skill is a coherent local PPT generation tool; its file access is expected for templates, inputs, and outputs, with one temp-file handling weakness users should understand.

Install only if you are comfortable giving the skill access to the specific report, HTML/JSON, and PPT template files you ask it to process. Avoid using sensitive templates in shared or multi-user environments until the fixed temp-file copy behavior is changed to use a unique private temporary file and cleanup.

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Lp3

Medium
Category
MCP Least Privilege
Confidence
90% confidence
Finding
The skill documentation describes concrete file read/write behavior such as consuming a user-provided template path and saving generated PPTX, previews, QA reports, and snapshots, but no declared permissions are shown. This mismatch is dangerous because it can cause the host to invoke a skill with broader filesystem access expectations than users or platform policy reviewers can see, increasing the risk of unauthorized file access or overwriting local files.

Vague Triggers

Medium
Confidence
77% confidence
Finding
The trigger phrases include broad natural-language requests like '做一份可编辑PPT', '用我的模板生成PPT', and '把这个看板导出成PPT', which are common everyday requests that may appear in unrelated contexts. Over-broad triggers are dangerous because they can cause accidental invocation, exposing user files or causing file generation actions when the user did not explicitly intend to use this skill.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The function copies a user-supplied PPTX to a fixed temporary filename in a shared temp directory before opening it. A predictable path can enable race conditions, unintended overwrite of another process's file, or disclosure of sensitive template contents to other local users/processes on the same host, especially in multi-user or service environments.

Static analysis

No suspicious patterns detected.