Html2pptx Shape

PassAudited by ClawScan on May 10, 2026.

Overview

This appears to be a local HTML-to-PPTX converter, with the main cautions being dependency/browser installation and converting only trusted HTML because linked local assets can be read during conversion.

Use the main converter only on HTML files you trust. Install dependencies in an isolated Python environment, review any local CSS/image references before converting, and remember that generated PPTX or embedded HTML outputs may include assets pulled from local files.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Installing the skill may add third-party packages and a browser binary to the user's environment.

Why it was flagged

The setup requires external Python dependencies and a Playwright browser runtime. This is disclosed and relevant to the skill, but it expands the local software supply chain.

Skill content
pip3 install -r requirements.txt
playwright install chromium
Recommendation

Install in a virtual environment, review requirements.txt, and consider pinning or verifying dependencies if using this in a sensitive environment.

What this means

Converting untrusted HTML could cause the converter to read local files named by stylesheet links, and those contents may enter the conversion process or embedded-HTML output.

Why it was flagged

The input HTML's stylesheet href controls which local CSS file is read and embedded. This is expected for CSS inlining, but untrusted HTML could reference unintended local paths.

Skill content
css_path = Path(base_path) / css_href ... with open(css_path, 'r', encoding='utf-8') as f: css_content = f.read()
Recommendation

Convert only trusted HTML, inspect link and asset references before conversion, and prefer running the tool in a directory containing only the intended presentation assets.