html2pptx

SUSPICIOUS. The core HTML-to-PPTX functionality is coherent and mostly uses legitimate tooling, but the skill’s footprint expands notably with remote font downloads, optional credentialed vision auditing, arbitrary proxy routing via ANTHROPIC_BASE_URL, and an autonomous code-fixing subagent. This is not confirmed malware, but it carries meaningful supply-chain, credential-routing, and agentic-action risk beyond a simple local converter.

No strong indicators of embedded malware (no execution/persistence/backdoor behavior) were observed in this fragment. The primary security concern is intentional data exfiltration: it base64-encodes and transmits local PNG render artifacts and DOM-derived text metadata to an external LLM API using a secret API key from environment variables. Because the destination endpoint can be overridden via ANTHROPIC_BASE_URL and the fragment appears incomplete (SYSTEM_PROMPT value and trailing main() call truncated), risk should be assessed with the complete package context and with strict controls over inputs, environment configuration, and network egress.