Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Presentation Maker

v1.0.0

AI presentation generator that creates professional slides from outlines using Tree of Thoughts for content organization.

0· 36·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Name and description match an AI slide-generation tool. The declared artifact set (no binaries, no env vars, no install) is plausible for a purely instructional skill that produces slide content locally. However, the feature list includes 'Google Slides' export and 'PPTX/PDF' export without any description of how those exports are produced or what credentials/tools are needed, which is an unresolved inconsistency.
!
Instruction Scope
SKILL.md contains a high-level description and feature list but no concrete runtime instructions (no commands, no API endpoints, no algorithmic steps beyond the name). It does not explain how to perform 'Tree of Thoughts' organization, how to generate or write PPTX/PDF, or how to interact with Google Slides; the instructions are overly vague and grant broad discretion to the agent at runtime.
Install Mechanism
No install spec and no code files beyond package.json and SKILL.md. This is low-risk: nothing will be downloaded or written by an installer as part of skill installation.
Credentials
The skill requests no environment variables or credentials. That is reasonable for an instruction-only generator that returns slide text. However, some advertised features (Google Slides export, PPTX export) would normally require access to external services or libraries and possibly credentials; the absence of declared env vars is therefore a bookkeeping mismatch and should be clarified.
Persistence & Privilege
always is false and the skill does not request persistent presence or modify system/other-skill configuration. It does not request elevated privileges.
What to consider before installing
This skill is an instruction-only description of a slide-generator and doesn't install anything — that's low risk. But the SKILL.md is vague: it claims exports (Google Slides, PPTX) without describing how those are implemented or what credentials would be needed. Before installing or enabling autonomously, ask the author to clarify: (1) what exact runtime steps the agent will take to generate slides, (2) whether any external services or libraries (and their endpoints) will be called, and (3) what credentials (if any) are needed and why. If you plan to export to Google Slides or cloud services, never provide credentials unless you understand and trust the code that will use them.

Like a lobster shell, security has layers — review code before you run it.

latestvk97139p7z2kc1mj6c1qp823xth843yej

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Comments