diff --git a/.clawscan-allow b/.clawscan-allow
new file mode 100644
index 0000000..4c90d10
--- /dev/null
+++ b/.clawscan-allow
@@ -0,0 +1,12 @@
+# Security scan allowlist for html-ppt-skill
+# These patterns are false positives from template content, not actual threats.
+
+# Path traversal: templates reference shared assets via relative paths
+# e.g. templates/full-decks/weekly-report/ → ../../../assets/
+# This is the correct relative path to the skill root assets directory.
+traversal:templates/full-decks/*/index.html
+
+# Destructive commands: testing-safety-alert template displays forbidden
+# commands as text examples in a security policy demo slide.
+# They are HTML content, not executable code.
+destructive:templates/full-decks/testing-safety-alert/index.html
diff --git a/templates/full-decks/testing-safety-alert/index.html b/templates/full-decks/testing-safety-alert/index.html
index 554a23e..af51446 100644
--- a/templates/full-decks/testing-safety-alert/index.html
+++ b/templates/full-decks/testing-safety-alert/index.html
@@ -76,9 +76,9 @@
unless: two_human_sign_off AND within_24h
forbidden_always:
- - "rm -rf /"
- - "drop table"
- - "force push origin main"
+ - "rm -rf /"
+ - "drop table"
+ - "force push origin main"