AI Presentation Maker

v1.0.0

AI Presentation Maker — the interview-driven pitch deck generator for your OpenClaw agent. Tell it what you built, who you're presenting to, and pick an angl...

1· 2.1k·14 current·18 all-time
byJeff J Hunter@jeffjhunter
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Name/description align with the included scripts (markdown → PPTX/HTML/PDF exports, speaker notes, templates). The required binaries are minimal and proportional. Minor mismatch: SKILL metadata claims “No network activity required,” but the generated HTML references external Google Fonts (network fetch when viewed).
!
Instruction Scope
SKILL.md tightly instructs the agent to execute shell commands (USE exec) and to route ALL file I/O through assets/presentation-helper.sh, which is consistent. However: (1) the SKILL.md tells the agent to check for files in ~/workspace (e.g., SOUL.md/AGENTS.md) — this reads outside the stated presentations scope; (2) SKILL.md rules prohibit overwriting files without asking, but the helper script's save-meta and save-deck commands will overwrite existing files without enforcing a prompt; (3) SKILL.md requires use of the helper script, but other SKILL.md fragments and the setup instructions are inconsistent about where to copy the helper (~/workspace vs ~/workspace/presentations), which may break relative references.
Install Mechanism
There is no remote install step — all helper and export scripts are bundled, which reduces supply‑chain risk. Exports rely on optional external tools (python3, python-pptx, pandoc). The generated HTML includes an @import from fonts.googleapis.com (external network fetch at render time), which contradicts the 'no network activity' claim in metadata.
Credentials
The skill requests no environment variables, no credentials, and declares no config path requirements outside ~/workspace/presentations. That is proportionate to the stated purpose.
Persistence & Privilege
always:false and user-invocable: true (normal). The skill writes files under ~/workspace/presentations (declared stateDir). It does not request system-wide or other skills' credentials. Note: SKILL.md encourages the agent to run commands autonomously via exec — expected for skills, but combined with the other concerns this increases the blast radius.
What to consider before installing
This skill appears to be what it says (a local presentation generator) but there are a few things you should consider before installing or using it: 1) The SKILL.md claims “No network activity required” but the generated HTML imports Google Fonts (your browser will fetch them). If you require fully offline operation, edit the template or remove the font import. 2) The helper script will overwrite existing metadata/markdown files when saving — SKILL.md instructs the agent to ask before overwriting, but the save commands do not enforce prompts. Back up ~/workspace/presentations before first use. 3) The runtime checks look at other files in ~/workspace (SOUL.md, AGENTS.md), so the agent may read files outside the presentations folder for context — if those files are sensitive, don't install or run in that account. 4) The helper uses /tmp for temporary JSON; there is a small race/symlink risk on multi-user systems. 5) Exports requiring python3/pandoc/python-pptx must be installed; the code is bundled (no remote download), which reduces supply‑chain risk. Recommended actions: review the bundled scripts yourself (they are included), run the skill first in an isolated account or VM, confirm backups of existing presentation data, and if you need strict offline behavior, remove external font imports and audit any places that touch paths outside ~/workspace/presentations. If you want higher assurance, ask the maintainer for explicit overwrite safeguards and for the agent to avoid checking files outside the declared scope.

Like a lobster shell, security has layers — review code before you run it.

latestvk97c473p3ty23ss8231geeypzx81k6cx

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Runtime requirements

🎤 Clawdis
Binsbash, sed, find, grep, date, wc

Comments