AI PPT generate
v1.0.0The intelligent PPT generation tool is provided by Baidu. It is a tool that intelligently generates PPTS based on the themes or questions given by users. Users can choose PPT themes, templates, or even customize their own templates. It also provides image or resource files (such as pdf,word,txt, etc.). The download address for the final generated PPT file is provided
⭐ 14· 8.7k·69 current·74 all-time
bybaidu_qianfan@baiduqianfangroup
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
The name/description (Baidu AI PPT generation) aligns with the included scripts: they call Baidu endpoints (qianfan.baidubce.com) to list themes, generate outlines, and produce PPTs. The required python binary is appropriate. However, the registry metadata claims no required env vars while both SKILL.md and all three scripts require a BAIDU_API_KEY — this mismatch is a packaging/information inconsistency.
Instruction Scope
SKILL.md instructs the agent to call the three Python scripts which send requests to Baidu APIs. The instructions only reference the BAIDU_API_KEY and user-supplied parameters (query, resource_url, custom_tpl_url, etc.). The scripts do not read arbitrary files, other environment variables, or local configuration beyond BAIDU_API_KEY, and they stream SSE responses as expected.
Install Mechanism
There is no install spec (instruction-only skill with bundled Python scripts). That is low risk — nothing is downloaded or extracted by an installer. The only runtime requirement is a Python interpreter and the requests library (not explicitly declared), so the user/agent must provide a Python environment.
Credentials
The skill requires a BAIDU_API_KEY (checked at runtime in every script and referenced in SKILL.md) but the registry metadata lists no required environment variables; this is an inconsistency that could confuse users and lead to unexpected failures or misconfiguration. The BAIDU_API_KEY is the only credential used; no unrelated secrets are requested. Note: user-supplied resource_url and custom_tpl_url are relayed to the remote API and could cause user data (or links to files) to be sent to Baidu's service.
Persistence & Privilege
The skill does not request persistent/always-on inclusion, does not modify other skills/configurations, and does not write to system paths. Autonomous invocation is allowed (platform default) but not combined with any unusual privilege escalation.
What to consider before installing
This skill appears to be a wrapper for Baidu's AI-PPT APIs and its scripts require a BAIDU_API_KEY at runtime — despite the registry metadata saying no env vars are required. Before installing, confirm: (1) you have a dedicated BAIDU_API_KEY for this purpose (avoid using broad or privileged keys), (2) qianfan.baidubce.com is the intended/official service endpoint for your key, and (3) any resource_url or custom_tpl_url you supply may be uploaded or fetched by the remote service (don’t pass links to sensitive documents). Also ensure your Python environment has the 'requests' package available. The main issue is the metadata omission of the required env var — if the publisher fixes that, the package is coherent; currently treat the omission as a red flag and verify the origin of the skill and the API key usage policy before proceeding.Like a lobster shell, security has layers — review code before you run it.
latestvk97fq6pjmqpg6bhre0cseyqe1h80gdhn
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
📑 Clawdis
Binspython