powerpoint

Warn

Audited by Socket on Oct 22, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/build_deck.py

This is presentation-generation code with no evident built-in malware. Security concerns are the explicitly authorized execution of content-extra.py behind an incomplete AST-based restriction and image-path traversal that can read and embed files outside the content directory. Treat slide content and scripts as trusted, or strengthen script isolation and constrain resolved image paths.

Confidence: 98%Severity: 55%
Audit Metadata
Analyzed At
Oct 22, 2026, 06:36 AM
Package URL
pkg:socket/skills-sh/microsoft%2Fhve-core%2Fpowerpoint%2F@05faceae8f7a00a7d654afb3901d8becf31fc93e62d5821587508567c5929f53