Image To PPT Pro

ReviewAudited by ClawScan on May 10, 2026.

Overview

The image-to-PPT purpose is coherent, but the OCR helper can automatically install system and Python packages at runtime, so users should review it before use.

Use this skill only if you are comfortable with local OCR/PPT generation and dependency installation. Before running it, consider using a container or virtual environment, review any generated JavaScript before execution, and do not provide wallet credentials or sensitive tokens because the reviewed artifacts do not require them.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Medium

#ASI05: Unexpected Code Execution

What this means

Running the helper may change the local system/Python environment and execute package installation logic from configured repositories without a separate user approval prompt.

Why it was flagged

The OCR helper can run OS and Python package-manager commands automatically when dependencies are missing, rather than requiring an explicit managed install step.

Skill content

Dependencies (auto-installed on first run): ... apt-get install -y tesseract-ocr ... subprocess.run(["apt-get","install","-y","-q", ...], check=True) ... subprocess.run([sys.executable,"-m","pip","install","pytesseract","--break-system-packages","-q"], check=True)

Recommendation

Move dependency installation to a declared install spec, pin versions, use a virtual environment or container, and require explicit user approval before apt-get or pip installation.

Low

#ASI04: Agentic Supply Chain Vulnerabilities

What this means

Dependency behavior may vary over time and global installs can affect other projects on the same machine.

Why it was flagged

The documented setup uses unpinned global/system package installs. These dependencies are relevant to PPT/OCR generation, but the install path is not isolated or version-locked.

Skill content

npm install -g pptxgenjs
pip install Pillow numpy pytesseract --break-system-packages -q
# LibreOffice + pdftoppm (from poppler-utils)

Recommendation

Prefer pinned dependencies in an isolated environment and document exact package versions and OS packages needed.