nanobanana-ppt

SUSPICIOUS. The visible catalogue skill is not overtly malicious and its claimed PPT-generation purpose matches the likely upstream capabilities, but its core behavior is to steer the agent/user into installing a separate skill bundle from a personal GitHub repository. That transitive installation step, combined with unpinned shell-based setup and upstream credential use, makes the skill materially riskier than a normal self-contained catalogue entry.