The Agent Skills Directory

[SAFE]: The skill's primary function is to generate single-file HTML presentations based on user-provided content. A detailed audit of the provided templates in the assets/ directory (e.g., PPT-Generate-1.html, PPT-warm-paper-demo.html) confirms they use standard CSS @keyframes and Vanilla JavaScript for slide navigation and element animation. No malicious shell commands, persistent mechanisms, or exfiltration logic were found.
[EXTERNAL_DOWNLOADS]: The skill uses the Google Fonts CDN (fonts.googleapis.com) to load typography. As a well-known and trusted service, this does not contribute to a negative security verdict.
[INDIRECT_PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection because it incorporates untrusted user data into generated HTML/JS code. However, since the skill's purpose is content generation and the templates do not perform sensitive operations with the processed data, the risk is negligible. No specific instructions to ignore safety boundaries or bypass sanitization were identified.

ppt-animation