open-pptd

Warn

Audited by Socket on Oct 21, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The presentation-editing purpose is plausible, but the actual install footprint is inconsistent with the public upstream evidence: the skill claims a native Rust `pptd` compiler and uses `install_binary.py`, while surfaced official docs for `open-pptd` describe a Node.js CLI from a personal GitHub repo. Because the skill asks the agent to install or build an unverifiable external binary that will process local files, the supply-chain risk is high even without confirmed credential theft or malware behavior.

Confidence: 90%Severity: 79%
Audit Metadata
Analyzed At
Oct 21, 2026, 09:12 AM
Package URL
pkg:socket/skills-sh/shiquda%2Fopen-pptd-skill%2Fopen-pptd%2F@44e7c2defc79b6f79f4f0b1a114e22a28ab5e4f3f6542e63d846b3bc75b7eb6c