heating the forge...

@forgecat/nomadamas_slides-grab — Security Risk Report | ForgeCat

nomadamas_slides-grab

Security risk report for @forgecat/nomadamas_slides-grab v0.1.3

Low

Profile is a packaged fork of upstream NomaDamas/slides-grab (commit 745c931c8f5556d8b9fdfe6718c8a507f6223935) with ForgeCat packaging notes indicating source links are pinned and repository-star instructions are neutralized.
All markdown content, skill definitions, and agent instructions are derived from the original repository with ForgeCat metadata overlays; no malicious source substitution detected.
Low risk: source is traceable, versioned, and the packaging notes explicitly document neutralization of upstream directives (e.g., 'repository-star instruction is neutralized').

Low

Content describes a legitimate presentation-building workflow (Plan → Design → Export) with no instructions to manipulate the AI, exfiltrate credentials, or hide instructions.
Skill files and agent definitions document design gates, validation loops, and quality checks — these are process controls, not prompt injection or guidance poisoning.
References to external URLs (CDN for Pretendard font, GitHub raw content for installation docs) are standard dependency fetching, not exfiltration or malicious redirection.

Details

Findings

Invisible characters detected
README.md · SKILL-011
Invisible characters detected
docs/installation/claude.md · SKILL-011
Invisible characters detected
docs/installation/codex.md · SKILL-011
Invisible characters detected
skills/slides-grab-design/SKILL.md · SKILL-011
Invisible characters detected
skills/slides-grab/references/presentation-workflow-reference.md · SKILL-011
Invisible characters detected
skills/slides-grab-design/references/design-rules.md · SKILL-011
Invisible characters detected
skills/slides-grab-design/references/detailed-design-rules.md · SKILL-011
Invisible characters detected
skills/slides-grab-export/references/html2pptx.md · SKILL-011
Invisible characters detected
src/design-diversity-data.js · SKILL-011

Evidence

AGENTS.md: 'Read https://raw.githubusercontent.com/vkehfdl1/slides-grab/main/docs/installation/claude.md and follow every step.' — standard installation guidance, not injection.
SKILL.md: 'Always follow the stage order: Plan → Design → Export. Get explicit user approval before advancing to the next stage.' — procedural control, not manipulation.

Low

Skills declare only standard presentation-building operations: HTML generation, file validation, image rendering, PDF/PNG export, and optional PPTX conversion.
No shell execution, file deletion, or unrestricted filesystem access is requested in the skill definitions; CLI commands are scoped (e.g., `slides-grab validate --slides-dir <path>`).
Agent definitions (design-critic-agent, slides-grab-design-critic) invoke read-only review tasks and call bounded CLI commands; no excessive agency detected.

Details

Evidence

slides-grab/SKILL.md: 'Routes the user request to the HTML-mode or image-native-mode sub-skill, then runs the shared plan, design, and export stages.' — routing, not privilege escalation.
design-critic-agent.md: 'Run `slides-grab validate`, render evidence, produce read-only review reports' — all operations are scoped and non-destructive.
No alwaysApply=true rules or globs='**' patterns declared.

Low

Profile declares no MCP servers; all functionality is delivered via npm package (slides-grab CLI) and bundled skill markdown.
Dependencies (pptxgenjs, playwright, sharp, markitdown, defusedxml, pillow) are well-known, open-source libraries with no hidden execution or network access beyond expected browser automation and image processing.
Optional system tools (LibreOffice, Poppler, yt-dlp) are explicitly marked as optional and are standard utilities; no arbitrary binary execution detected.

Details

Evidence

AGENTS.md Dependencies section lists Node.js packages with version constraints (pptxgenjs ^3.12.0, playwright ^1.40.0, sharp ^0.33.0).
No MCP server definitions in profile content.
System tools documented as optional: 'System (optional): LibreOffice (soffice) — PPTX thumbnail generation; Poppler (pdftoppm) — PDF to image conversion.'