SkillMD Review · baoyu-slide-deck
our safety review · skill by Jim Liu (baoyu)
CAUTION
Runs scripts (merge-to-pptx.ts, merge-to-pdf.ts) with bun, which can write files and execute arbitrary code.
reviewed 2026-07-06
What the verdicts mean
PASS
No risky instructions — documentation or standard, read-only development-tool usage.
CAUTIONthis skill
Legitimate purpose with real capabilities (runs scripts, calls services, or handles credentials). Read the skill before installing.
WARNING
Risky patterns beyond the skill's job — elevated privileges, config changes, or bypassed confirmations. Review carefully.
FAIL
Instructions a safe skill should never contain — injection, exfiltration, or destructive commands. Don't install unless you've verified the source.
INCONCLUSIVE
Could not be confidently assessed — treat as unreviewed and inspect the SKILL.md yourself.