pitch-deck-creator-edtech

Warn

Audited by Socket on Mar 13, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The skill’s overall purpose is coherent, and its Google Slides flow uses official APIs, but the PowerPoint path introduces a major trust gap by copying and executing `html2pptx.js` from an unverifiable hardcoded local path. That local script provenance is incompatible with a well-scoped, reproducible skill distribution and drives the risk classification upward despite otherwise legitimate deck-generation behavior.

Confidence: 88%Severity: 81%
Audit Metadata
Analyzed At
Mar 13, 2026, 09:46 AM
Package URL
pkg:socket/skills-sh/beerspitnight%2Fcc-skills%2Fpitch-deck-creator-edtech%2F@4b636c677b8fd94b3e6d2b6933777d8af9132267