open-pptd
Warn
Audited by Socket on Oct 21, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The presentation-editing purpose is plausible, but the actual install footprint is inconsistent with the public upstream evidence: the skill claims a native Rust `pptd` compiler and uses `install_binary.py`, while surfaced official docs for `open-pptd` describe a Node.js CLI from a personal GitHub repo. Because the skill asks the agent to install or build an unverifiable external binary that will process local files, the supply-chain risk is high even without confirmed credential theft or malware behavior.
Confidence: 90%Severity: 79%
Audit Metadata