heating the forge...

@forgecat/nomadamas_slides-grab — Security Risk Report | ForgeCat

nomadamas_slides-grab

Security risk report for @forgecat/nomadamas_slides-grab v0.1.3

Low

The profile declares a single upstream source: the original NomaDamas/slides-grab repository at commit b904568fc8a56e7ec8ca13fffdfcc6b1952c5284, licensed MIT.
Third-party design data is properly attributed to corazzon/pptx-design-styles (MIT) and epoko77-ai/design-diversity (MIT), with license text included.
No typosquatted, attacker-controlled, or suspicious package names are recommended; all references are to well-known legitimate packages (Playwright, Chart.js, Lucide, Pretendard, tldraw, yt-dlp).

Low

The profile documents a legitimate presentation-design workflow with no instructions to manipulate the AI, read credentials, exfiltrate data, or hide its own instructions.
References to external URLs (GitHub repositories, CDN links for fonts/libraries) are for documentation and standard library sourcing, not for fetching malicious payloads or exfiltration.
The design guidance, while detailed, is descriptive best-practice instruction for building slides—not poisoned knowledge designed to steer future outputs toward attacker goals. Recommendations for Lucide icons, Chart.js, Pretendard font, and tldraw diagrams are standard, well-known tools with no security-weakening intent.

Details

Findings

Invisible characters detected
skills/slides-grab-design/SKILL.md · SKILL-011
Invisible characters detected
skills/slides-grab/references/presentation-workflow-reference.md · SKILL-011
Invisible characters detected
skills/slides-grab-design/references/design-rules.md · SKILL-011
Invisible characters detected
skills/slides-grab-design/references/detailed-design-rules.md · SKILL-011

Evidence

README.md references legitimate upstream sources and standard npm packages.
SKILL.md files document workflow stages (Plan → Design → Export) with no instructions to bypass security, read system prompts, or install remote payloads.
design-rules.md and beautiful-slide-defaults.md provide art direction and component templates—standard design guidance, not malicious knowledge injection.

Low

The profile declares no tools, hooks, or MCP servers with executable authority.
All commands referenced (slides-grab, playwright, npm, yt-dlp) are invoked by the user or the installed CLI runtime, not by the profile itself.
The skill descriptions route user requests through a documented workflow; they do not demand file_write, file_delete, shell, or other high-risk categories beyond what the user explicitly requests via the CLI.

Details

Evidence

No tool definitions or alwaysApply rules are present in the profile.
Commands like `slides-grab validate`, `slides-grab build-viewer`, and `slides-grab image` are user-initiated, not autonomously executed.
File operations (creating slide-*.html, writing viewer.html) are scoped to the user-selected `<slides-dir>` workspace, not arbitrary filesystem access.

Low

No MCP servers are defined in the profile.
The profile is a collection of markdown skill instructions and design templates, not a server definition with hidden instructions or arbitrary binary execution.
External dependencies (slides-grab CLI, Playwright, npm packages) are declared transparently and sourced from public repositories.

Details

Evidence

The profile contains no MCP server configuration, tool definitions, or binary execution directives.
All external runtime requirements are documented in the README under 'External runtime requirements' and 'Runtime setup'.