pptx-penfick

SUSPICIOUS. The skill’s stated purpose and local file operations are coherent for PPT generation, and there is no clear exfiltration or credential harvesting in the provided text. However, it requires an external CLI/MCP executable whose provenance is not verifiable from the snippet, so install trust is disproportionately weak relative to the missing publisher/package evidence.