morph-ppt-3d

SUSPICIOUS. The skill’s core behavior matches its stated PPT/3D purpose, but it relies on remote-script installation of an external CLI and mixes web/model fetching with executable workflow steps. Data flows are broadly proportionate and I found no credential harvesting or exfiltration, but the installer trust model and transitive dependency on officecli/morph-ppt keep risk above benign.