Is skill/slides-generator safe?
Use with caution. skill/slides-generator is not clearly unsafe, but the audit flagged risks to review before you install it. Oathe's behavioral security audit gave the slides-generator skill by skill a trust score of 69/100 with 5 findings (1 critical, 1 high).
https://clawhub.ai/skill/slides-generator
Is skill/slides-generator safe to install?
This skill provides legitimate PDF generation functionality but implements it through high-risk methods including remote shell script execution and embedded Python code. The curl | bash pattern for downloading external scripts presents a significant security vulnerability that could be exploited for system compromise.
What security issues were found in skill/slides-generator?
Category Scores
Findings (5)
CRITICAL Remote Shell Script Execution -50 ▶
The skill instructs the agent to download and execute shell scripts directly from GitHub using 'curl | bash' pattern without verification or sandboxing.
HIGH Embedded Python Code Execution -20 ▶
The shell script contains extensive embedded Python code that can execute system commands, create files, and process user input with broad filesystem access.
MEDIUM System Dependency Installation -15 ▶
The skill instructs global installation of system dependencies which could affect the entire system environment.
MEDIUM Network Activity During Installation -15 ▶
External network connections were observed during skill installation to download dependencies and scripts.
LOW Potential Attack Vector -10 ▶
The skill provides a pathway for code execution that could be exploited by attackers or combined with other malicious skills.
Should I install skill/slides-generator?
Oathe's verdict for skill/slides-generator is CAUTION with a trust score of 69/100. Recommendation: Review before install.