skills/tristan-mcinnis/pptx-from-layouts-skill/elite-powerpoint-designer/Socket

elite-powerpoint-designer

Warn

Audited by Socket on Jul 14, 2026

1 alert found:

Anomaly

Anomalyskill.md

LOW

AnomalyLOW

skill.md

SUSPICIOUS. The skill’s purpose is coherent, and it does not ask for secrets or show overt exfiltration, but it relies on installing a third-party MCP server from an unrelated and now-archived upstream project. That makes this mainly a transitive supply-chain trust risk rather than confirmed malware.

Confidence: 85%Severity: 57%

Audit Metadata

Analyzed At

Jul 14, 2026, 08:37 AM

Package URL

pkg:socket/skills-sh/tristan-mcinnis%2Fpptx-from-layouts-skill%2Felite-powerpoint-designer%2F@1bb8eac8b6fedec3e093c3eb513b21542e98fdab3bb5da51c53860625cc76d46