pptwise Audit report.

Warnings

• Permission surface may require sandboxing
• Financial research output is not financial advice; require human review before any live investment decision
• The skill relies on executing a third-party CLI via npx/bunx, which introduces supply-chain and execution risk; the pinned version helps, but there is no explicit integrity verification step.
• SKILL.md does not include an explicit note to treat user-supplied source material as untrusted data, which is important to reduce prompt-injection risk when converting notes or outlines into slides.
• Low GitHub adoption signal
• Financial research output is not financial advice; require human review before any live investment decision.
• Quality score needs review
• Permission surface needs review: shell or command execution, filesystem or document access
• GitHub adoption: 10 GitHub stars
• Stars/forks activity: 10 stars, 0 forks; issue activity unavailable in current metadata
• Permission surface: shell or command execution, filesystem or document access

Method

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.