gpt-image2-ppt

SUSPICIOUS. The skill's capabilities mostly fit its stated PPT-generation purpose, but the trust model is weaker than ideal: install requires running a shell script from a personal GitHub repo, and API/data flows can be redirected to arbitrary OpenAI-compatible relays. This looks more like a risky but plausible developer tool than confirmed malware.

No direct evidence of embedded malware (no exec/eval, no network, no credential theft) exists in this wrapper module. However, the module introduces a high-impact execution boundary by running an environment-controlled external command (CODEX_CMD) via subprocess without a strict allowlist/validation that it is the intended codex CLI. It also passes untrusted prompt content and absolute output/reference paths to that external tool, which can lead to unintended filesystem writes or behavior if inputs/environment are attacker-controlled.