slide-pptx

SUSPICIOUS. This card is mostly a reference pointer, not malware, but it creates a transitive trust chain by telling users to execute Vercel's npx-based skills installer against a remote Anthropic repo. The install path is somewhat verifiable, yet the cross-org execution chain and skill-name inconsistency make the footprint riskier than a simple documentation card.