AI PPT Generator
v1.0.3使用Markdown快速生成专业PPT，支持自动图表转换、多主题、多类型列表、引用和代码块，自动识别感谢页。
⭐ 1· 1.3k·14 current·14 all-time
bybeiling@agilight
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The name/description (Markdown → PPTX with charts/themes) matches the provided SKILL.md and the included Node script (parsing, theme/colors, chart detection). Required capabilities (reading an input Markdown file, writing an output .pptx) are consistent with the stated purpose.
Instruction Scope
SKILL.md instructs the agent to run the bundled Node script on a user-supplied Markdown file and produce a PPTX. The instructions do not request unrelated files, extra environment variables, or external endpoints. The agent will read user-provided Markdown and write an output .pptx as expected.
Install Mechanism
There is no install spec even though package.json/package-lock.json are included and the script requires the npm dependency pptxgenjs. SKILL.md claims the dependency is '已安装' (installed). This is a minor inconsistency: if the runtime does not already provide pptxgenjs, the operator will need to run npm install, which would pull packages from the npm registry. The provided package-lock.json points to normal npm packages (no suspicious remote archives).
Credentials
The skill declares no required environment variables, no credentials, and no config paths. The visible script functions operate on passed filenames and internal parsing logic. There are no obvious references to secrets or external service tokens in the visible code.
Persistence & Privilege
Skill flags are defaults (not always:true). The skill does not request persistent privileges or modify other skills' configs. It runs as an invoked script that reads input and writes output.
Assessment
This skill appears coherent for converting Markdown into PPTX and auto-detecting charts. Before installing or running it: 1) Inspect the remainder of scripts/ppt-maker.js (the file preview was truncated here) to confirm it does not make network calls (download/upload) or spawn shell commands. 2) If your runtime doesn't already have Node dependencies, running 'npm install' will fetch packages from the public npm registry — do this in a sandboxed environment if you are cautious. 3) Provide only non-sensitive Markdown as input (it will be read and written to disk). 4) If you need higher assurance, run the script in an isolated container and grep the full source for network APIs (http/https, fetch, axios, net, child_process, eval) before using it in production.Like a lobster shell, security has layers — review code before you run it.
latestvk977pzen42dk4a0m8kv84s96ph83cqv2
License
MIT-0
Free to use, modify, and redistribute. No attribution required.