Ppt Deck Master
AdvisoryAudited by VirusTotal on Apr 24, 2026.
Overview
Type: OpenClaw Skill Name: ppt-deck-master Version: 1.5.0 The bundle is a legitimate and well-structured tool for generating high-quality PowerPoint presentations using AI image generation via the Ofox or OpenRouter APIs. The core logic in `scripts/generate_deck.py` facilitates the sequential generation of slide images and their assembly into a `.pptx` file. While the script requires API keys and performs network requests to third-party AI providers, these actions are transparent and necessary for the tool's stated functionality. The extensive instructions in `SKILL.md` and the `references/` directory serve as design and quality constraints for the AI agent and do not contain malicious prompt injections, data exfiltration attempts, or unauthorized persistence mechanisms.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Text included in slide prompts can leave the local machine and be processed by Ofox or OpenRouter.
Slide prompt content is sent to external image/model providers for generation. This is disclosed and purpose-aligned, but prompts may contain private client or business material.
"prompt": prompt ... "https://api.ofox.ai/v1/images/generations" ... "https://openrouter.ai/api/v1/chat/completions"
Do not include confidential material unless the provider terms and your organization allow it; redact sensitive client data when possible.
Your provider account may be charged for image generations, and the key grants access according to that provider’s permissions.
The generator uses Ofox/OpenRouter API keys as bearer tokens. This is expected for the advertised integration, but the registry metadata lists no required env vars.
key = os.environ.get("OFOX_API_KEY") or os.environ.get("OPENROUTER_API_KEY") ... "Authorization": f"Bearer {api_key}"Use a dedicated low-limit API key, set spending limits if available, and avoid pasting API keys into prompts or shared files.
Running the helper will make network requests and write generated images/PPTX files locally.
The documented workflow requires running a local Python helper and optionally installing a package. This is central to the skill’s purpose and is user-directed, not hidden.
python3 scripts/generate_deck.py ... python3 scripts/generate_deck.py --assemble ... 依赖：`pip install python-pptx`
Review the script, run it from the skill directory or a virtual environment, and install dependencies from a trusted package index.
A future dependency version could behave differently or introduce compatibility/security issues.
The optional PPTX assembly step uses an unpinned external Python package. This is normal for the feature, but it leaves dependency version selection to the user’s environment.
依赖：`pip install python-pptx`（仅组装时需要）
Prefer a virtual environment and, for repeatable use, pin a known-good python-pptx version.