html-ppt-skill

SUSPICIOUS. The skill’s presentation-building capabilities are coherent and there is no clear credential theft or exfiltration, but the install story has medium trust issues: transitive skill installation, personal GitHub hosting, publisher mismatch with ara.so, and unpinned repo/script execution. Overall this looks more like a normal but weakly trusted community skill than malware.