OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail5 providerslatest audit Sep 15, 2026
Independent checks from skills.sh's audit partners.
The pptx skill provides comprehensive tools for presentation manipulation but contains a high-risk ZipSlip vulnerability in its unpacking script, allowing malicious files to overwrite arbitrary system files. It also uses dynamic browser execution for rendering and is susceptible to indirect prompt injection from processed slide content.
Detected behaviors
No alerts
No issues
55/55 files flagged
Score: 93/100 · 2 sections analyzed