Security risk report for @forgecat/openai_skills_slides v0.0.11
Source Integrity
Low
Profile is sourced from OpenAI's official skills repository (GitHub: openai/skills) with a specific commit hash and Apache-2.0 license.
Static scanner confirms low risk; source is a known, legitimate upstream project.
Agent Intent
Low
Content describes legitimate slide-authoring workflows using PptxGenJS and bundled helper utilities; no instructions to ignore system prompts, read credentials, or exfiltrate data.
Guidance recommends standard, well-known packages (PptxGenJS, Pillow, pdf2image, python-pptx) and security-aligned practices (validation, overflow checks, font detection).
No prompt injection, role hijacking, system prompt leakage, or malicious knowledge poisoning detected.
README and SKILL.md focus on slide creation workflows, helper APIs, and validation commands.
Authoring rules emphasize safety: 'Fix all unintentional overlap and out-of-bounds warnings before delivering.'
Dependencies list only legitimate, open-source packages with no typosquatting or attacker-controlled alternatives.
Permissions
Low
No tools or hooks are declared in the profile; the skill is purely instructional guidance for using PptxGenJS and bundled Python scripts.
Recommended actions (file I/O, script execution) are scoped to task-local directories and final artifact delivery, matching the stated purpose of slide creation and validation.
No excessive agency, alwaysApply rules, or glob-based file system access requested.
Details
Evidence
Profile declares '(none declared)' for tools and MCP servers.
Workflow section specifies: 'Keep work in a task-local directory. Only copy final artifacts to the requested destination after rendering and validation pass.'
Validation commands are examples only, not enforced hooks.
MCP Risk
Low
No MCP servers are defined in the profile.
Python scripts (render_slides.py, slides_test.py, etc.) are bundled utilities with clear, documented purposes and no hidden instructions.
System tool dependencies (LibreOffice, Poppler, Inkscape) are standard, well-known open-source tools used for legitimate document processing.
Details
Evidence
Profile declares '(none)' for MCP servers.
Script descriptions are transparent: 'Rasterize a .pptx or .pdf to per-slide PNGs', 'Detect content that overflows the slide canvas'.
Dependency notes list only public, auditable packages and tools.
ForgeCat