dashi-ppt
What this skill does
Presentation generation tool that creates HTML-based slides with customizable themes and content, supporting export to PPTX/PDF formats.
github/chuspeeism - Least Privilege - 5k stars
Threat analysis
Skill info
pkg:github/chuspeeism/dashi-ppt-skill@7cb2334?skill=dashi-pptAssessments (2)
Least Privilege
Least Privilege via local-llm-review
SKILL.md
The skill requires running Node.js scripts (`node <skill-root>/scripts/check_latest_version.mjs`) and installing dependencies during the first run. This could pose a risk if the user is not aware of tObfuscation
Obfuscation via local-llm-review
project/assets/unicorn/tech_background_remix_scene.json
The JSON file contains obfuscated shader code with comments about licensing and restrictions. While not inherently malicious, the obfuscation could be used to hide malicious behavior.Badge
Add the Anomity scan badge for dashi-ppt to your README.
How Anomity governs this at runtime
Scan-time vetting tells you what a skill says it will do. Anomity's Endpoint Sensor sees what agents actually do: it discovers skills alongside every other AI artifact on the endpoint, and runtime governance can allow, deny, or log the tool calls a skill triggers. Policy violations route to your SIEM, Slack, email, or Jira, backed by a queryable 90-day audit trail.
Book a 30-minute demo to see your own skill inventory.
Methodology and disputes
Every skill is assessed by the Anomity Skill Intelligence engine against its public source; findings indicate risk patterns, not confirmed exploitation. Maintainer of dashi-ppt? Report an issue or request a rescan.
