pptwise

This documentation describes provider-key configuration and optional local image generators; it shows no direct credential theft or other malicious action. It does document that enabled generators run with permission checks bypassed, so enabling them carries substantial local execution risk; they are stated to be off by default. Severity is moderate for users who enable these generators; no suspicious domains, hardcoded credentials, or exfiltration destinations are present in the excerpt.