Cjl Slides
v1.0.3Create stunning HTML presentations in 24 international design styles with strict design rules. Export to .pptx for PowerPoint editing. ## Design Philosophy -...
⭐ 0· 48·0 current·0 all-time
byJialin@0xcjl
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name/description match the included scripts (html-to-pptx.py and extract-pptx.py) and SKILL.md: converting between single-file HTML slides and .pptx and generating styled HTML slides is exactly what the code and instructions implement.
Instruction Scope
SKILL.md's runtime instructions stay within slide generation and conversion scope, but contain two small inconsistencies: (1) it claims 'Zero external dependencies: pure HTML/CSS/JS, works offline' while simultaneously describing use of Chart.js CDN (with a jsDelivr fallback), and (2) it assumes the skill's scripts live at '~/.claude/skills/cjl-slides/...', which may not match the agent environment. The instructions do not ask for unrelated files or secrets, but they do instruct running local Python scripts and optionally pip-installing python-pptx.
Install Mechanism
No install spec and no downloads; code is included in the skill package. This reduces install-time risk — nothing is fetched from arbitrary URLs and no archives are extracted.
Credentials
The skill requests no environment variables or credentials. It does instruct use of pip to install python-pptx if missing, which is a local dependency but not a secret.
Persistence & Privilege
always:false (default) and no indications the skill modifies other skills or system-wide agent config. It will read user-supplied .pptx files and write output (assets/ and .pptx), which is expected for its purpose.
Assessment
This skill appears to do what it claims (generate styled HTML slides and convert to .pptx) and does not request secrets. Before installing/using: (1) Inspect the full html-to-pptx.py (the provided snippet was truncated) to confirm there are no unexpected network calls or arbitrary execs; (2) be aware the SKILL.md assumes scripts live under '~/.claude/skills/cjl-slides/...' — adjust paths if your agent places skills elsewhere; (3) running conversion will write files (assets/, extracted-slides.json, and .pptx) to disk — avoid converting sensitive documents in an untrusted environment; (4) the SKILL.md claims 'zero external dependencies' but also references Chart.js CDN (and a jsDelivr fallback) — if you need fully offline operation, review generated HTML to remove CDN usage or vendor the script locally; and (5) if you want stronger assurance, run the Python scripts in a sandboxed environment or review/execute them locally rather than letting an autonomous agent run them.Like a lobster shell, security has layers — review code before you run it.
24-stylesvk975gam2fpkhr8emzcmkgy6ftx846bkpdesignvk975gam2fpkhr8emzcmkgy6ftx846bkphtmlvk975gam2fpkhr8emzcmkgy6ftx846bkplatestvk97as76gjcvcstr5kzkk0153d9847qwepptxvk975gam2fpkhr8emzcmkgy6ftx846bkppresentationvk975gam2fpkhr8emzcmkgy6ftx846bkpslidesvk975gam2fpkhr8emzcmkgy6ftx846bkp
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
