v1.0.0

slide-to-video-converter

BenignClawScan verdict for this skill. Analyzed May 1, 2026, 8:11 AM.

Analysis

This skill appears purpose-aligned for making slide videos, but users should notice its online TTS use, local tool installs, and optional background TTS server.

GuidanceThis skill is generally coherent for generating narrated slide videos. Before installing, be comfortable with installing its media-processing dependencies, and avoid the default online Edge TTS mode for sensitive slide notes unless you accept sending that text to the provider. If you use the optional HTTP TTS server, stop the background process when done.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Abnormal behavior control

Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.

Agentic Supply Chain Vulnerabilities

SeverityLowConfidenceHighStatusNote

SKILL.md

pip install -U mlx-audio soundfile numpy edge-tts pdf2image Pillow moviepy python-pptx

The skill asks users to install multiple unpinned Python packages and system tools. These dependencies are central to the video pipeline, but the registry metadata does not declare required binaries or an install spec.

User impactInstalling the skill's dependencies changes the local Python/system environment and pulls code from package repositories.

RecommendationInstall in a virtual environment, review package sources as needed, and consider pinning dependency versions for repeatable installs.

Rogue Agents

SeverityLowConfidenceHighStatusNote

SKILL.md

python scripts/tts_server.py &

The optional HTTP TTS mode starts a background service. This is disclosed and purpose-aligned, but it can keep running after the main conversion task completes.

User impactA local TTS service may continue running and consuming resources until manually stopped.

RecommendationUse the HTTP server mode only when needed, keep it local, and stop the background process after finishing the video conversion.

Sensitive data protection

Checks for exposed credentials, poisoned memory or context, unclear communication boundaries, or sensitive data that could leave the user's control.

Insecure Inter-Agent Communication

SeverityLowConfidenceHighStatusNote

scripts/pipeline.py

communicate = edge_tts.Communicate(
            text=text,
            voice=EDGE_TTS_VOICE,

The pipeline passes the slide narration text to Edge TTS, an online provider disclosed by SKILL.md. This is expected for TTS, but private speaker notes may leave the local machine.

User impactNarration text from the subtitle/script JSON may be sent to Microsoft Edge TTS for audio generation.

RecommendationAvoid the default online TTS mode for confidential material, or use the local Qwen/direct mode if privacy is required.