Baidu Wenku AIPPT

• Analyzed: May 16, 2026, 3:35 AM
• Findings: 1
• Version: 1.1.5
• Hash: cf496a0f95e07c6686091dfc91078629cebc19d918e43e6bf56b1399175c12fd
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is a legitimate integration with the Baidu Wenku AI PPT generation service. The scripts (generate_ppt.py, ppt_theme_list.py, and random_ppt_theme.py) correctly use the BAIDU_API_KEY to interact with official Baidu Qianfan endpoints (qianfan.baidubce.com). The workflow is transparent, and the use of subprocess.Popen in random_ppt_theme.py is implemented safely using argument lists, preventing shell injection.