Skills/npm/pptx-viewer-mcp

pptx-viewer-mcp@2.8.9

BLOCKED

Publisher claims: "pptx-viewer MCP server and tools: manipulate, convert, and collaborate on PowerPoint .pptx files from AI agents." Observed in sandbox: static analysis only — behavior not yet observed.

Registry npm (MCP server)Publisher christophervr · joined 0 days agoInstalls 61,783Last detonated 2 h ago

Dispute verdict

Behavior trace

Queued for honeypot run · static analysis only

t+CategoryObserved action

This version has not been detonated yet. The score above counts behavior as unknown (50/100), so it cannot read Verified until the honeypot run completes and replaces this verdict.

Static findings

CRITICAL

Access to sensitive file pathsdist/mcp/cli.js:15 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsdist/mcp/index.mjs:12 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsdist/mcp/index.js:14 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsdist/mcp/index.d.ts:7 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

npx invocation of non-well-known packageREADME.md:82 · npx invocation of non-well-known package — may execute untrusted code

AST06

CRITICAL

Access to sensitive file pathsdist/mcp/cli.mjs:13 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

npx invocation of non-well-known packageCHANGELOG.md:373 · npx invocation of non-well-known package — may execute untrusted code

AST06