Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Seedream Ppt Maker

v1.1.0

Seedream图片PPT制作器 - 宝玉布局框架 + Seedream 5.0文生图,自动生成图片PPT。支持交互式分步确认流程,减少反复修改节省API配额。

0· 88·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for cindypapa/seedream-ppt-maker.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Seedream Ppt Maker" (cindypapa/seedream-ppt-maker) from ClawHub.
Skill page: https://clawhub.ai/cindypapa/seedream-ppt-maker
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Required binaries: python3
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install seedream-ppt-maker

ClawHub CLI

Package manager switcher

npx clawhub@latest install seedream-ppt-maker
Security Scan
Capability signals
Requires sensitive credentials
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Name/description match the implementation: the code calls a Seedream (Volcengine) image API and assembles a PPT using baoyu-infographic templates. However the registry metadata declares no required env/config for credentials, while runtime explicitly requires a Volcengine API key stored in ~/.openclaw/config.json (volces.apiKey). That omission in metadata is an incoherence users should know about.
!
Instruction Scope
SKILL.md instructs the agent/user to store an API key in ~/.openclaw/config.json and to run check_install.py which itself will perform a live test API call. The code sends user-provided content and generated prompts to an external endpoint (https://ark.cn-beijing.volces.com/api/v3) — expected for image generation but important: user content (potentially sensitive) will be transmitted off-machine. The interactive flow code is intended to solicit confirmations, which limits accidental exfiltration, but that flow contains a coding error (see below) that may break or alter behavior.
Install Mechanism
There is no network install script; the package is instruction/code-only and relies on python3, requests, and python-pptx. No third-party archives or obscure download URLs are used by the skill itself. It does instruct use of clawhub to install baoyu-infographic which is expected.
!
Credentials
The skill requires a Volcengine (火山方舟) API key at runtime, but the skill registry metadata does not declare any required env vars — a mismatch. Aside from the API key, no unrelated credentials or paths are requested. The check_install script prints the first 20 chars of the API key to console, which may be an information leak in shared environments.
Persistence & Privilege
The skill does not request elevated or permanent privileges (always:false). It reads/writes under its own output directory and ~/.openclaw/config.json for the API key; it does not modify other skills or global agent settings.
What to consider before installing
What to consider before installing: - Functionality: This skill sends your content and generated prompts to Volcengine's Seedream API (ark.cn-beijing.volces.com) to create images and then downloads them to assemble a PPT. If your content is sensitive, do not upload it to the API. - API key: You must add your Volcengine API key into ~/.openclaw/config.json under "volces": {"apiKey": "..."}. The skill metadata did not declare this requirement — make sure you understand and trust the endpoint before providing the key. - Runtime test: check_install.py will attempt a live API call when run; this will consume quota if the key is valid. Run it locally and inspect outputs first. - Code quality: interactive.py contains a likely syntax bug (an unquoted identifier 'kpi' used in a literal list), which can raise an exception or break the interactive flow. Expect the interactive pathway to possibly fail; the direct one-shot script (baoyu_seedream_ppt.py) appears runnable. - Safety/practical steps: review the files locally, back up your ~/.openclaw/config.json before editing, set strict filesystem permissions on that file, and run check_install.py in a controlled environment. If you want to avoid sending sensitive data, use a throwaway API key or redact content before generation. - If uncertain: prefer to run the one-shot script with a small test document to confirm behavior, or inspect/patch interactive.py to fix the bug before using interactive mode.

Like a lobster shell, security has layers — review code before you run it.

Runtime requirements

Binspython3
latestvk97322j0az9qe4a7spcjxsgk71859hee
88downloads
0stars
1versions
Updated 6d ago
v1.1.0
MIT-0

seedream-ppt-maker - Seedream图片PPT制作器

基于宝玉布局框架 + Seedream 5.0,一键生成图片PPT。支持 交互式分步确认流程,减少反复修改,节省API配额。


⚠️ 安装后必须执行

# 检查依赖和 API Key 配置
python3 check_install.py

# 如果缺少依赖:
clawhub install baoyu-infographic
pip install python-pptx requests

# 如果缺少 API Key:
# 编辑 ~/.openclaw/config.json,添加:
# {"volces": {"apiKey": "你的火山方舟API Key"}}

🎯 触发条件

用户提到以下关键词时触发:

  • "生成PPT"
  • "图片PPT"
  • "Seedream PPT"
  • "用 seedream-ppt-maker"

🔄 收到请求后先确认

⚠️ 重要:收到用户请求后,必须先询问生成模式!

用户:帮我生成XX的PPT

助手回复:
收到!请选择生成模式:

1️⃣ **交互式分步生成**(推荐)
   - 分析内容 → 推荐3种布局×风格组合 → 你确认
   - 生成提示词 → 你确认 → 开始生成
   - 适合重要内容,减少反复修改,节省API配额

2️⃣ **一键快速生成**
   - 直接生成,无需确认
   - 适合简单内容或已有明确布局/风格需求

请回复 "1" 或 "2",或直接告诉我布局和风格(如:bento-grid + chalkboard)

📋 交互式流程(推荐)

步骤 1:分析内容,推荐方案

收到用户选择交互式后:

python3 interactive.py content.md --step analyze

输出推荐方案,等待用户确认。

步骤 2:生成提示词

用户确认方案后:

python3 interactive.py content.md --step prompts --layout 布局 --style 风格

展示提示词预览,等待用户确认。

步骤 3:生成图片并整合PPT

用户确认提示词后:

python3 interactive.py --step generate --config output/项目名/config.json

🚀 一键快速生成

用户选择一键生成或已有明确布局/风格时:

python3 baoyu_seedream_ppt.py content.md --layout 布局 --style 风格 --aspect landscape

🎨 布局 × 风格推荐

国风/传统文化内容

布局风格说明
linear-progressionaged-academia时间线 + 复古 sepia 古朴
bento-gridmorandi-journal多主题 + 莫兰迪手绘温和
dense-modulescraft-handmade高密度 + 手绘纸艺

科技/产品介绍

布局风格说明
bento-gridchalkboard多主题 + 黑板风清爽
dashboardtechnical-schematic数据展示 + 工程蓝图

对比/评测

布局风格说明
binary-comparisonchalkboardA vs B + 黑板风清晰
comparison-matrixbold-graphic多因素对比 + 漫画粗线

⚙️ 配置

火山方舟 API Key:

// ~/.openclaw/config.json
{
  "volces": {
    "apiKey": "你的API Key"
  }
}

📦 输出

output/项目名/
├── config.json          # 项目配置
├── prompts/             # 每页提示词
├── images/              # 生成的 PNG 图片
└── 项目名_布局_风格.pptx # 最终 PPT

🔗 链接

Comments

Loading comments...