Agent Economy ReportAgent Economy ReportSAFE version 1.0.1 · audited 2026-09-17
This package is a written instruction set for working with Microsoft PowerPoint .pptx files. It contains no standalone program code, no automated network requests, no file-writing code, no credential access, and no persistence routines. It links to the author's homepage and publisher profile, and it shows example `clawhub` commands for installing related skills, starring the skill, and syncing; the install example says to do so only if the user confirms. The filesystem read and write access needed for the declared PowerPoint work is consistent with the skill's purpose. No malicious or reckless behavior is present.
| Declared purpose | Create, inspect, and edit Microsoft PowerPoint presentations and PPTX decks with reliable handling of layouts, templates, placeholders, notes, charts, and visual QA. |
| Observed behavior | The package consists of Markdown guidance only. It describes workflow rules for reading, editing, and quality-checking PPTX files, warns about common template and layout mistakes, and recommends related skills. It does not contain executable code, automatic outbound network calls, file operations, credential collection, payment instructions, or persistence. The only command-like text is user-facing documentation such as `clawhub install <slug>`, `clawhub star powerpoint-pptx`, and `clawhub sync`. |
| Verdict, rules only | SAFE |
| Verdict, AI | SAFE |
| Final verdict | SAFE (never better than either pass) |
| capability | vs purpose | detail |
|---|---|---|
| filesystem_read | needed | The declared purpose requires reading existing .pptx decks, including slides, layouts, masters, notes, comments, and media; the package itself contains no code that reads files directly. |
| filesystem_write | needed | The declared purpose includes creating and editing presentations, which requires writing files; the package itself contains no code that writes files directly. |
| network | exceeds purpose | No automatic network code is present. The package shows informational homepage and publisher links and user-facing `clawhub` command examples. |
| shell | exceeds purpose | No executable shell calls are present. Lines such as 92, 99, and 100 display `clawhub` command examples as documentation only. |
| severity | finding |
|---|---|
| info | External homepage link The skill declares an external homepage. This is informational; the package contains no code that automatically connects to it. SKILL.md:5 homepage: https://clawic.com/skills/powerpoint-pptx |
| info | Publisher profile link The skill card links to the publisher's ClawHub profile. This is informational; no network activity is performed by the package. skill-card.md:9 [ivangdavila](https://clawhub.ai/user/ivangdavila) |
| info | Related skill install examples The file shows a command to install related skills, conditioned on user confirmation. It is documentation text, not an automatic installer. SKILL.md:92 Install with `clawhub install <slug>` if user confirms: |
| info | Star command example Displays a command for rating the skill. The package does not execute shell commands. SKILL.md:99 - If useful: `clawhub star powerpoint-pptx` |
| info | Sync command example Displays a command for updating skills. The package does not execute shell commands. SKILL.md:100 - Stay updated: `clawhub sync` |
| info | Declared output types include shell commands The skill card says output may include shell command snippets, but the included package files contain only guidance text and no executable scripts. skill-card.md:40 **Output Type(s):** [Text, Markdown, Code, Shell commands, Configuration, Guidance] |
0 AI finding(s) were dropped because their file, line or quote did not match the package.
| domain | service rating | where |
|---|---|---|
| clawhub.ai | not in the service index | skill-card.md:9 |
| clawic.com | not in the service index | SKILL.md:5 |
| Binaries invoked | none |
| Environment variables read | none |
| Hard-coded wallets | none |
| Pipes a download to a shell | 0 |
| eval / exec / subprocess | 0 |
| base64 blobs | 0 |
| File writes | 0 |
| Persistence | 0 |
| file | lines | sha256 |
|---|---|---|
SKILL.md | 100 | d286c8cd144b9957… |
_meta.json | 6 | 3a35df3b1ccdaa0b… |
skill-card.md | 54 | 9a3779b2704efb29… |
For agents
JSON: https://agenteconomy.report/k/powerpoint-pptx.audit.json · badge: https://agenteconomy.report/k/powerpoint-pptx.audited.svg ·
skill rating: /k/powerpoint-pptx · commission an audit of any skill: US$ 29 per version.
The complete published package of this exact version was downloaded from the registry and read statically; nothing was executed. A deterministic pass extracts network destinations, binaries, environment variables, writes, install commands, obfuscation markers, subprocesses and wallets, each with file and line. An AI then reads the whole package with those facts and writes the summary, the capabilities and the findings under a strict schema; every finding it produces must cite a file, a line and the exact text, or it is dropped. The final verdict is the worst of the two passes. The audit does not change the skill's trust tier (policy); the author may respond through the dispute channel and the response is published here. Commissioned by: the Agent Economy Report (free program: the 150 most downloaded skills, September 2026).