slideshow

SUSPICIOUS. The skill’s core slideshow functionality is coherent and mostly benign, but it embeds a silent self-update step that executes an unpinned external CLI command and may refresh additional skills before use. Because the tooling appears to come from the official HyperFrames npm/GitHub ecosystem, this looks more like overreaching auto-update behavior and transitive trust expansion than malware.