Scanned skills

yuan1z0825/nature-skills nature-image2ppt

Checked the catalogued skill at nature-image2ppt.

SkillTrust corpus scan 7 November 2026 v0.13.0 via skillsh Verify on GitHub
D AI-triaged 104
D Security

D; retained sample includes a high finding · SD-007 · what this rule accepts as a false positive →

D Permissions

D; retained sample includes a high finding · SD-003 · what this rule accepts as a false positive →

B Transparency

B set by findings not listed in the stored summary

showing 10 of 104
securityhigh SD-007
cli/image2ppt/runtime/build_pptx_from_manifest.py
securityhigh SD-007
cli/image2ppt/runtime/build_pptx_from_manifest.py
securityhigh SD-007
cli/image2ppt/runtime/build_pptx_from_manifest.py
permission_hygienehigh SD-003
cli/image2ppt/runtime/build_pptx_from_manifest.py
securityhigh SD-007
cli/image2ppt/runtime/build_pptx_from_manifest.py
securityhigh SD-007
cli/image2ppt/runtime/build_pptx_from_manifest.py
securityhigh SD-007
cli/image2ppt/runtime/build_pptx_from_manifest.py
securityhigh SD-007
cli/image2ppt/runtime/build_pptx_from_manifest.py
securityhigh SD-007
cli/image2ppt/runtime/build_pptx_from_manifest.py
securityhigh SD-007
cli/image2ppt/runtime/build_pptx_from_manifest.py
14 suppressed by AI triage
securityhigh SD-007 benign_example
cli/image2ppt/runtime/_input_normalization.py

The URI is an XML namespace used for parsing, not an outbound network request.

securityhigh SD-007 benign_example
cli/image2ppt/runtime/_input_normalization.py

The URI is an XML namespace for drawingml, used in parsing, not a network call.

securityhigh SD-007 benign_example
cli/image2ppt/runtime/_input_normalization.py

The URI is an XML namespace for presentationml, used in parsing, not a network call.

securityhigh SD-007 benign_example
cli/image2ppt/runtime/_input_normalization.py

The URI is an XML namespace for officeDocument relationships, used in parsing, not a network call.

securityhigh SD-007 benign_example
cli/image2ppt/runtime/deck_text_hints.py

The URL is only printed as user guidance; no outbound network call is performed.

securityhigh SD-007 benign_example
cli/image2ppt/runtime/image_gen.py

The file is a documentation text with no executable code or config that would enable outbound network calls.

securityhigh SD-007 benign_example
cli/image2ppt/runtime/image_gen.py

Documentation example illustrating outbound network call permission, not an active threat

permission_hygienehigh SD-003 benign_example
cli/image2ppt/runtime/record_imagegen_result.py

The absolute path appears only in example usage in the argument parser epilog, not in executable code; no actual file access is performed.

transparencymedium SD-007 benign_example
config.example.yaml

Comment only, no network call executed

transparencymedium SD-007 benign_example
config.example.yaml

Comment only, no network call executed

permission_hygienehigh SD-003 benign_example
references/cli-helper.md

The absolute path is in a documentation example, not executable code.

transparencymedium SD-007 benign_example
schemas/page-manifest-v2.schema.json

The $schema URL references a public JSON‑schema repository, which is a normal, non‑malicious external reference.

transparencymedium SD-007 benign_example
schemas/page-manifest-v2.schema.json

The $id field points to a GitHub URL for schema identification; this is a benign reference, not an active outbound call.

securityhigh SD-007 benign_example
tests/test_project_metadata.py

The URL appears only as a reference in a README file, not as an executed network call or permission grant.