Baidu Wenku AIPPT
PassAudited by ClawScan on May 1, 2026.
Overview
This skill appears to do what it says—generate PPTs through Baidu’s API—but users should notice that it needs a Baidu API key and sends PPT content/output to Baidu.
This appears safe for ordinary use if you trust Baidu’s PPT service and the skill publisher. Before installing, make sure you are comfortable providing BAIDU_API_KEY and sending your PPT topic/content to Baidu; avoid confidential material unless your organization permits that data flow.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
You have less context about who maintains the skill or where the code originated.
The skill does not provide an upstream source or homepage, which limits provenance information even though no remote installer or hidden dependency source is shown.
Source: unknown Homepage: none
Review the bundled scripts and install only if you trust the registry publisher and the shown code.
Using the skill means allowing its local Python scripts to run on your machine or agent environment.
The skill runs a bundled Python helper script to generate the PPT. This is expected for the skill’s purpose, and the visible code builds an argument list rather than invoking a shell.
cmd = [sys.executable, script_path, "--query", query, "--tpl_id", str(tpl_id), "--style_id", str(style_id)]
Run it only when you intend to generate a PPT, and keep the query content limited to what you are comfortable processing through the skill.
The skill can use your Baidu API credential to make PPT-generation API requests, which may affect account usage or billing.
The script reads BAIDU_API_KEY from the environment and uses it to authenticate to Baidu’s PPT API, which is expected for this integration.
api_key = os.getenv("BAIDU_API_KEY") ... "Authorization": "Bearer %s" % api_keyUse a dedicated or scoped Baidu API key where possible, and revoke or rotate it if you stop using the skill.
Any confidential topic details or supplied content may be processed and stored by Baidu as part of generating the PPT.
The user’s topic, generated outline, optional web content, and final PPT generation request are sent to Baidu, with output saved through Baidu/BOS for a returned PPT URL.
"query": query, "outline": outline.outline, "web_content": web_content, "enable_save_bos": True
Do not include secrets, private documents, or sensitive business information unless you are comfortable sending them to Baidu’s service.