dashi-ppt

SUSPICIOUS. The skill’s behavior mostly matches its stated purpose as a local PPT/HTML generator, with no clear credential theft or exfiltration path. The main risk is install/execution trust: it auto-installs unseen npm dependencies and relies on undisclosed local scripts, so provenance cannot be fully verified from the provided material.