ppt-craft-editable@0.1.5
VERIFIED· install onlyPublisher claims: "端到端 PPT 全流程，单技能自包含。用户首次触发本 skill 时，agent 必须默默跑 scripts/preflight.py 做环境自检 + 自动安装缺失的 Python 包；FAIL 才打断用户。 环境通过后走 conversation-first + image-first 工作流：多阶段对话、内容..." Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Coverage
Nothing executable in the bundle ran; the trace covers the install step only.- Tested
- every file read, file written and host contacted by what ran
- Not tested
- use of the skill by an agent
Is [email protected] safe to install?
KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-12 and scored it 81/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.
Behavior trace
Honeypot run · 0 s · 1 scenarios · 0 deviationst+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
0.0sprocessno install scripts to re-run
Static findings
HIGH
Privileged sudo commandSKILL.md:40 · Privileged sudo command — agent may execute with elevated privileges
AST05| 系统字体 | — | ❌ 跨平台不一致 + 需要 sudo |Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.HIGH
Privileged sudo commandscripts/doctor.py:149 · Privileged sudo command — agent may execute with elevated privileges
AST05" Debian/Ubuntu: sudo apt install fonts-noto-cjk\n"Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.HIGH
Privileged sudo commandscripts/preflight.py:18 · Privileged sudo command — agent may execute with elevated privileges
AST05- 系统字体安装（需要 sudo / 跨平台不一致）Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.MEDIUM
Python subprocess execution detectedscripts/preflight.py:109 · Python subprocess execution detected
AST05proc2 = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.HIGH
Privileged sudo commandscripts/preflight.py:155 · Privileged sudo command — agent may execute with elevated privileges
AST05print(" Linux: sudo apt install python3.11 或对应发行版的命令")Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.MEDIUM
Python subprocess execution detectedscripts/launch_iopaint.py:85 · Python subprocess execution detected
AST05code = subprocess.call(setup_cmd)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.MEDIUM
Python subprocess execution detectedscripts/launch_iopaint.py:173 · Python subprocess execution detected
AST05proc = subprocess.Popen(cmd, env=env)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.MEDIUM
Python subprocess execution detectedscripts/setup_iopaint.py:194 · Python subprocess execution detected
AST05code = subprocess.call(pip_args, env=_pip_env())Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.MEDIUM
Python subprocess execution detectedscripts/preflight.py:271 · Python subprocess execution detected
AST05doctor_proc = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.MEDIUM
Python subprocess execution detectedscripts/setup_iopaint.py:214 · Python subprocess execution detected
AST05code = subprocess.call(cmd, env=env)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.MEDIUM
Python subprocess execution detectedscripts/setup_iopaint.py:147 · Python subprocess execution detected
AST05out = subprocess.check_output(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.HIGH
Privileged sudo commandscripts/doctor.py:150 · Privileged sudo command — agent may execute with elevated privileges
AST05" Fedora: sudo dnf install google-noto-sans-cjk-fonts")Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.MEDIUM
Python subprocess execution detectedscripts/preflight.py:77 · Python subprocess execution detected
AST05proc = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.MEDIUM
File type combined with upload actionscripts/extraction_to_deck.py:85 · File type combined with upload action — agent may exfiltrate local data files
AST07print(f"[ok] deck.json → {output_path}")Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.Cost to the agent
Instructions loaded
≈6,941 tok
1 file · 57 in bundle
Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.
Known vulnerabilities
Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.