pptx

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). The only suspicious URL is the ClawHub link because it points to a personal/unverified host (clawhub.ai) used to distribute the skill source rather than an established vendor or well-known repository, which is a higher-risk distribution vector for unvetted executables or code.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Path A “Read text from a .pptx” invokes scripts/extract_text.py, which loads the user-supplied /path/to/deck.pptx with python-pptx and prints extracted slide text from that file at runtime.