Corespeed Pptx
v0.0.1Generate professional PowerPoint (.pptx) presentations using JSX/TSX with Deno. Supports slides, text, shapes, tables, charts (bar, line, pie, donut), images...
⭐ 0· 137·0 current·1 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The name/description (Generate .pptx from JSX/TSX using Deno) matches the actual artifacts: a Deno wrapper (scripts/generate.ts), a deno.json mapping @pixel/pptx, and SKILL.md usage. Requiring the deno binary is appropriate.
Instruction Scope
The runtime instructions and generate.ts dynamically import a user-provided file via file:// and run it under Deno with --allow-read and --allow-write. That is necessary to evaluate JSX/TSX slides, but it means arbitrary code in the slide file will execute with filesystem permissions (can read/write local files). Also Deno will auto-download remote deps (jsr:@pixel/pptx), so remote packages can be fetched and executed.
Install Mechanism
There is no separate install manifest, but SKILL.md includes an install step that pipes https://deno.land/install.sh to sh. The URL is the official Deno domain (well-known), but curl | sh is higher-risk than a manual install — it downloads and executes remote shell script. Deno itself may fetch @pixel/pptx from the JSR registry at runtime.
Credentials
The skill only requires the deno binary and requests no credentials, config paths, or secrets. This is proportional to its stated purpose.
Persistence & Privilege
always is false (no forced persistence). The default autonomous invocation is allowed; combined with the fact the skill runs Deno to execute arbitrary local modules with read/write, an agent invoking it could run code that reads local files. Autonomous invocation alone is normal, but be aware of the increased blast radius because of the execute-read/write behavior.
Assessment
This skill appears to do what it says, but it runs user-supplied .tsx code under Deno with filesystem permissions and may fetch remote dependencies. Before installing/use: (1) Do not run untrusted .tsx files — inspect slide files for unexpected code. (2) Prefer installing Deno manually from https://deno.land rather than piping remote scripts, or at least review the install script. (3) Run the generator with least-privilege flags (e.g., --allow-read=/path/to/slides --allow-write=/path/to/output.pptx) rather than broad --allow-read/--allow-write, and avoid enabling network unless necessary or run in an isolated environment. (4) If you will allow autonomous agent invocation, be aware the agent could invoke the skill and thereby execute code that reads files — restrict agent scope or require user confirmation when running this skill if that is a concern.Like a lobster shell, security has layers — review code before you run it.
latestvk97bgy6cvk5bp09h5zvpzg1yj58387sm
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
📊 Clawdis
Binsdeno