Marp Cli
v0.0.1Convert Markdown to presentations via CLI. Output HTML, PDF, PowerPoint (PPTX), and images (PNG/JPEG).
⭐ 1· 1.7k·16 current·16 all-time
byKGTAF@killgfat
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (Markdown→presentations) aligns with the declared requirement (needs the 'marp' binary) and the SKILL.md commands. No unrelated credentials, binaries, or config paths are requested.
Instruction Scope
SKILL.md only instructs running marp CLI commands and documents options (watch, server, --allow-local-files, --browser-path). Those options legitimately expand Marp's capabilities (e.g., server exposes files, --allow-local-files permits local file access). This is expected for a CLI reference but is a user-risk consideration rather than an incoherence.
Install Mechanism
No install spec and no code files — lowest-risk, instruction-only skill. The README suggests standard installation methods (npm, brew, binaries) which are appropriate.
Credentials
No environment variables or credentials are required by the skill. Examples show use of PORT/HOST and --browser-path, which are normal usage patterns and not unexpected secret requests.
Persistence & Privilege
Skill is not always-enabled, does not request persistent privileges, and contains no install-time actions. Autonomous invocation is allowed (platform default) but the skill has no extra persistent access.
Assessment
This skill is a documentation-only wrapper around the Marp CLI — it assumes you already have a legitimate 'marp' binary. Before using: (1) install marp from the official project (npm, Homebrew, or official releases) to avoid malicious binaries; (2) be cautious with server mode and --allow-local-files (they can expose local files or loads of data if served to networks); (3) avoid feeding untrusted Markdown that may reference local resources if you enable local-file access; and (4) ensure your browser executable path is explicit if you have multiple browsers to avoid accidentally invoking an unexpected binary.Like a lobster shell, security has layers — review code before you run it.
latestvk97a127dsezdpwt7nmx8syhkvh80xxe3
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
📽️ Clawdis
Any binmarp
