slizdeck@2.5.0
VERIFIED· install onlyPublisher claims: "Agent Skill que genera decks de slides HTML animados desde tu design system" Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Registry npm (MCP server)Publisher pedroanze · publishing for 50 daysInstalls 83Last detonated 13 min ago
Coverage
Nothing executable in the bundle ran; the trace covers the install step only.- Tested
- every file read, file written and host contacted by what ran
- Not tested
- use of the skill by an agent
Is [email protected] safe to install?
KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-14 and scored it 83/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.
Behavior trace
Honeypot run · 0 s · 1 scenarios · 0 deviationst+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
0.0sprocessno install scripts to re-run
Static findings
HIGH
Destructive file system command detectedscripts/check-docs.mjs:110 · Destructive file system command detected
AST05// La lista vive como una regex alternada (STOPPED_LOOKING) dentro delFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.HIGH
Destructive file system command detectedscripts/shoot.mjs:113 · Destructive file system command detected
AST05// (assets/logos/x.svg), y esa ruta se resuelve contra la carpeta delFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.MEDIUM
npx invocation of non-well-known packageSKILL.md:96 · npx invocation of non-well-known package — may execute untrusted code
AST06….html` corre los cuatro validadores. Usar siempre los scripts de `<skill>`, no `npx slizdeck`: `npx` baja la última versión publicada, que puede no coincidir con la skill ins…Fix: Pin versions and sources; vendor anything fetched at install time.LOW
Prompt injectionDESIGN.md:193 · Prompt injection — known jailbreak technique reference · informational: not an instruction file
AST01…frame. ## Elevation & Depth Ambiental y sutil, nunca estructural. Las sombras dan a las cards una separación suave del fondo crema; no simulan botones "presionab…Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.MEDIUM
File type combined with upload actionscripts/doctor.mjs:94 · File type combined with upload action — agent may exfiltrate local data files
AST07console.log(` ⚠ generado con la versión ${deckVersion}; el engine actual es ${current}. Cambios posteriores en CHANGELOG.md que podrían aplicarte:\n`);Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.LOW
Prompt injectionreference/3d.md:25 · Prompt injection — known jailbreak technique reference · informational: not an instruction file
AST01…tándar (p. ej. `Idle`, `Wave`, `Walking`). Los personajes y objetos estilizados dan un resultado mucho más limpio que las fotografías realistas de personas. - *…Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.MEDIUM
npx invocation of non-well-known packagebin/slizdeck.mjs:10 · npx invocation of non-well-known package — may execute untrusted code
AST06* npx slizdeck update | uninstall | whereFix: Pin versions and sources; vendor anything fetched at install time.HIGH
Destructive file system command detectedscripts/lib/measure-deck.mjs:402 · Destructive file system command detected
AST05// Rotado (rotate() en el SVG): la caja medida es la envolvente delFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.MEDIUM
npx invocation of non-well-known packagescripts/poster-3d.mjs:168 · npx invocation of non-well-known package — may execute untrusted code
AST06console.error(' Verifica la conexion de red (si el deck no es offline) o ejecuta antes: npx slizdeck 3d add <deck.html>');Fix: Pin versions and sources; vendor anything fetched at install time.MEDIUM
npx invocation of non-well-known packagebin/slizdeck.mjs:9 · npx invocation of non-well-known package — may execute untrusted code
AST06* npx slizdeck install --agent claude,codex --projectFix: Pin versions and sources; vendor anything fetched at install time.MEDIUM
File type combined with upload actionbin/slizdeck.mjs:271 · File type combined with upload action — agent may exfiltrate local data files
AST07console.log('\nSi agregaste a mano el hook de reference/hooks.md, quita su bloque hooks.PostToolUse del .claude/settings.local.json de tu proyecto.');Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.LOW
Prompt injectionCHANGELOG.md:102 · Prompt injection — known jailbreak technique reference · informational: not an instruction file
AST01- **Nuevo: evals** (`evals/`): 8 briefs fijos, rúbrica visual y `scripts/score-deck.mjs` (puntaje 0-100). Línea base: los tres decks de prueba dan 65/100, con demasiado texto y sin notas.Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.MEDIUM
npx invocation of non-well-known packagebin/slizdeck.mjs:8 · npx invocation of non-well-known package — may execute untrusted code
AST06* npx slizdeck install instala en los agentes detectadosFix: Pin versions and sources; vendor anything fetched at install time.MEDIUM
npx invocation of non-well-known packagescripts/audit.mjs:304 · npx invocation of non-well-known package — may execute untrusted code
AST06caution(`el deck 3D carga three.js desde la red (si no hay wifi se verá el póster; para presentar offline: npx slizdeck export offline ${file})`);Fix: Pin versions and sources; vendor anything fetched at install time.MEDIUM
npx invocation of non-well-known packagebin/slizdeck.mjs:11 · npx invocation of non-well-known package — may execute untrusted code
AST06* npx slizdeck env Node, Chrome y dependenciasFix: Pin versions and sources; vendor anything fetched at install time.MEDIUM
npx invocation of non-well-known packagescripts/verify-hook.mjs:23 · npx invocation of non-well-known package — may execute untrusted code
AST06* npx o git no se auto-instala: reference/hooks.md documenta cómo agregarlo aFix: Pin versions and sources; vendor anything fetched at install time.MEDIUM
npx invocation of non-well-known packagescripts/export-pptx.mjs:67 · npx invocation of non-well-known package — may execute untrusted code
AST06console.error(' (o reinstala la skill con: npx slizdeck install)');Fix: Pin versions and sources; vendor anything fetched at install time.MEDIUM
npx invocation of non-well-known packagebin/slizdeck.mjs:12 · npx invocation of non-well-known package — may execute untrusted code
AST06* npx slizdeck audit deck.html (y el resto de los scripts, ver HELP)Fix: Pin versions and sources; vendor anything fetched at install time.Cost to the agent
Instructions loaded
≈3,579 tok
1 file · 74 in bundle
Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.
Known vulnerabilities
Not checked against OSV yet; the weekly check has not reached this version.