iFLYTEK AI PPT Generator
v1.0.1Generate professional, structured PowerPoint presentations from optimized topic keywords.
⭐ 0· 356·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name, description, declared env vars (XF_PPT_APP_ID, XF_PPT_API_SECRET), and the code all point to the iFLYTEK/XFYUN PPT generation API (base_url = https://zwapi.xfyun.cn/api/ppt/v2). The requested credentials and network calls are proportional to the stated purpose.
Instruction Scope
SKILL.md tells the agent to run scripts/index.py generate_ppt with an optimized topic. The runtime code will optimize the topic, optionally integrate web resources (currently mocked), and POST user content to XFYUN endpoints (template/list, createOutline, etc.). This means user-provided content will be transmitted to XFYUN's servers — expected for this skill but important for privacy. SKILL.md also warns not to pass raw input directly, which the code attempts to enforce via optimize_input.
Install Mechanism
There is no install spec even though the repository includes an executable Python script that imports non-standard packages (requests, requests_toolbelt). The skill declares python as a required binary but does not declare or install Python package dependencies; running it will fail unless those packages are present or installed manually. No downloads from untrusted URLs are present.
Credentials
Only XF_PPT_APP_ID and XF_PPT_API_SECRET are required, which is appropriate for an external PPT-generation API. No unrelated credentials, config paths, or broad system secrets are requested.
Persistence & Privilege
The skill is not set to always:true and does not request special system privileges. It does not modify other skills or agent-wide config (based on provided files). Autonomous invocation is allowed (the platform default) but not combined with other concerning flags.
Assessment
This skill is coherent with its stated purpose: it sends your (optimized) topic and generated content to XFYUN's PPT API and requires XFYUN credentials. Before installing, consider: (1) privacy — any content you pass will be transmitted to xfyun.cn; avoid sensitive data or validate XFYUN's data handling policy; (2) runtime dependencies — the script requires Python packages (requests, requests_toolbelt) but the skill has no install spec, so you must ensure those are present or install them manually; (3) origin/trust — the registry owner is unknown even though the homepage is a legitimate XFYUN doc page; verify you trust this package/source; (4) review full script — the included Python file makes network requests only to XFYUN endpoints and contains no obvious exfiltration to other hosts, but you should inspect the untruncated script if you need higher assurance. If any of these points worry you, request a version signed by a known publisher or require an install spec that pins dependencies.Like a lobster shell, security has layers — review code before you run it.
latestvk97724q2nbkrs0gxp9t8paevyd82c9z5
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
📊 Clawdis
Binspython
EnvXF_PPT_APP_ID, XF_PPT_API_SECRET
Primary envXF_PPT_APP_ID