Skills marp-slide

📦

marp-slide

Name: marp-slide
Author: softaworks

Content revision r1 Medium Risk 🌐 Network access🔑 Env variables⚙️ External commands

Create Polished Marp Slide Decks

Presentation drafts often need structure, theme choices, and Marp-specific syntax. This skill turns topics or rough notes into styled Marp decks with reusable themes.

Supports: Claude Codex Code(CC)

⚠️ 50 Poor

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "marp-slide" from https://skillstore.io/skills/softaworks-marp-slide.md and its manifest at https://skillstore.io/api/skills/softaworks-marp-slide/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/softaworks-marp-slide.md Signed manifest GET /api/skills/softaworks-marp-slide/manifest Signed lockfile GET /api/skills/softaworks-marp-slide/lockfile

Test it

Using "marp-slide". Create slides about cloud computing basics for new engineers.

Expected outcome:

A default-themed Marp deck with a title slide, concept slides, benefits, risks, and a summary.
Headings are concise, each slide has focused bullets, and the file is ready for Marp rendering.

Using "marp-slide". Make my Python tutorial slides look cool.

Expected outcome:

A tech-themed deck with a dark background, code-friendly typography, and clear section breaks.
Dense tutorial notes are split into shorter slides with consistent visual hierarchy.

Using "marp-slide". Create a Q1 business review presentation from these notes.

Expected outcome:

A business-themed deck with formal tone, table-ready styling, and a logical report flow.
The presentation includes an overview, metrics, analysis, next steps, and closing slide.

Security Audit

Medium Risk

v4 • 7/7/2026 Open versioned report

Most static findings are false positives from Markdown inline code, CSS border values, official documentation links, and a GitHub Actions example. Confirmed risk is limited to low-risk Google Fonts imports in theme CSS, plus a medium semantic issue where local file rendering is recommended without trust-boundary warnings.

Files scanned

4,688

Lines analyzed

Review items

False positives ignored

Confirmed security concerns (1)

Medium

references/advanced-features.md:334 references/advanced-features.md:420-431

Unsafe Local File Rendering Guidance

The advanced features guide recommends Marp rendering with local file access but does not warn users to restrict this to trusted decks and assets. Untrusted Markdown rendered with local file access can reference local paths and expose sensitive files during export or sharing.

The file explicitly suggests --allow-local-files in both build and troubleshooting guidance. This is legitimate for trusted local assets, but the missing trust-boundary warning creates a clear misuse risk.

Capability review items (7)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Low

assets/theme-business.css:2

Hardcoded URL

@import url('https://fonts.googleapis.com/css2?family=Noto+Sans+JP:wght@400;500;700&display=swap');

The CSS imports Google Fonts from an external domain, so rendered slides may make network requests and expose usage metadata. This is expected styling behavior, but it is still a real low-risk network dependency.

Low

assets/theme-colorful.css:2

Hardcoded URL

@import url('https://fonts.googleapis.com/css2?family=Noto+Sans+JP:wght@400;700;900&display=swap');

Low

assets/theme-dark.css:2

Hardcoded URL

@import url('https://fonts.googleapis.com/css2?family=Noto+Sans+JP:wght@400;700&display=swap');

Low

assets/theme-default.css:2

Hardcoded URL

@import url('https://fonts.googleapis.com/css2?family=Noto+Sans+JP:wght@400;700&display=swap');

Low

assets/theme-gradient.css:2

Hardcoded URL

@import url('https://fonts.googleapis.com/css2?family=Noto+Sans+JP:wght@400;700&display=swap');

Low

assets/theme-minimal.css:2

Hardcoded URL

@import url('https://fonts.googleapis.com/css2?family=Noto+Sans+JP:wght@300;400;500&display=swap');

Low

assets/theme-tech.css:2

Hardcoded URL

@import url('https://fonts.googleapis.com/css2?family=Noto+Sans+JP:wght@400;700&family=Fira+Code:wgh

Risk Factors

🌐 Network access (13)

assets/theme-business.css:2 assets/theme-colorful.css:2 assets/theme-dark.css:2 assets/theme-default.css:2 assets/theme-gradient.css:2 assets/theme-minimal.css:2 assets/theme-tech.css:2 SKILL.md:232 SKILL.md:233 SKILL.md:234 SKILL.md:235 SKILL.md:236 SKILL.md:237

🔑 Env variables (1)

references/advanced-features.md:354

⚙️ External commands (51)

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/softaworks-marp-slide/audits/4?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/softaworks-marp-slide/security.svg)](https://skillstore.io/skills/softaworks-marp-slide?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/softaworks-marp-slide?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/softaworks-marp-slide/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/softaworks-marp-slide.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

softaworks. (2026). marp-slide security audit report (audit version 4) [Author version unspecified]. Skillstore. https://skillstore.io/skills/softaworks-marp-slide/audits/4

BibTeX citation

@techreport{softaworks-softaworks-marp-slide-2026,
  author = {softaworks},
  title = {marp-slide security audit report (audit version 4)},
  institution = {Skillstore},
  year = {2026},
  number = {4},
  url = {https://skillstore.io/skills/softaworks-marp-slide/audits/4},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "marp-slide security audit report (audit version 4)"
version: "unspecified"
type: report
authors:
  - name: "softaworks"
date-released: "2026-07-07"
url: "https://skillstore.io/skills/softaworks-marp-slide/audits/4"
identifiers:
  - type: other
    value: "skillstore:softaworks-marp-slide:audit:4"
    description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: High

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Build Lecture Slides

Turn lesson topics into clean Marp slides with concise headings, bullets, and optional diagrams.

Prepare Technical Talks

Create code-friendly decks with dark or tech themes, structured sections, and image placement patterns.

Draft Business Presentations

Convert plans, reports, or proposals into professional slides with formal styling and table support.

Try These Prompts

Create a Basic Deck

Create a Marp slide deck about [topic] for [audience]. Use a clear theme and make 6 to 8 slides.

Improve an Outline

Turn this outline into a professional Marp deck. Choose a suitable theme, improve the flow, and keep each slide concise: [outline]

Add Visual Layouts

Create Marp slides for [topic] using the [theme] style. Include image placement suggestions for these assets: [image list].

Design a Workshop Deck

Build a Marp workshop deck for [session title]. Include sections, exercises, summary slides, speaker-friendly pacing, and a polished technical theme.

Best Practices

Provide the audience, goal, topic scope, and desired tone before asking for a deck.
Review generated slides for factual accuracy, image rights, and sensitive information before sharing.
Render the Markdown with Marp locally and check spacing, fonts, and image paths before presenting.

Avoid

Do not paste large unstructured documents and expect a polished deck without guidance.
Do not use remote images or fonts in confidential presentations without approval.
Do not enable local file access for untrusted Markdown or unreviewed image paths.