ClawHub
Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Frontend Slides

v1.0.0

Create stunning, animation-rich HTML presentations from scratch or convert PowerPoint files (.ppt/.pptx) to beautiful web slides. Use when the user wants to...

⭐ 1· 503·1 current·1 all-time
byLeo Ye@leoyeai
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description match the instructions: building zero-dependency HTML slides, converting PPTs, and optionally enhancing existing HTML. The README documents that PPT conversion uses python-pptx and Pillow — libraries relevant to the stated feature. No unrelated binaries, env vars, or credentials are requested.
ℹ
Instruction Scope
SKILL.md explicitly instructs the agent to read user-provided files (PPT/X/PPTX, existing HTML, image folders) and to run simple filesystem introspection like `ls` to find images. This file access is coherent with the task, but it means the agent will request reading arbitrary user paths (e.g., ~/Desktop or ./assets). Users should be aware that providing paths grants the agent access to those local files and any sensitive content inside them.
✓
Install Mechanism
There is no automated install spec and no code files; the skill is instruction-only. The README notes optional developer-side dependencies (python-pptx, Pillow) for PPT/image processing — these are reasonable and are documented rather than being fetched automatically by the skill.
✓
Credentials
The skill does not request environment variables, credentials, or config paths. Its operational needs (file access and optional local Python packages) match the functionality described.
✓
Persistence & Privilege
always is false and the skill is user-invocable; it does not request persistent platform privileges or indicate it will modify other skills or global agent settings. It may save edits to localStorage in generated HTML (documented), which is local to the generated pages.
Assessment
This skill appears to do what it claims: generate and convert presentations. It will ask to read files and folders you point it to (PPTs, HTML, images) — only grant access to directories you trust. For PPT conversion and image processing you may need to install python-pptx and Pillow locally; the skill does not fetch or execute code from remote URLs. Avoid handing over slides or folders that contain sensitive credentials or private data. If you want tighter control, run the conversion locally yourself (install python-pptx/Pillow) and paste only the exported text/images you want the agent to use.

Like a lobster shell, security has layers — review code before you run it.

latestvk975cvbks0my0xkyzkw45yd86d826r6t

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments