openclaw-slides

PassAudited by ClawScan on May 1, 2026.

Overview

The visible artifacts describe a coherent slide-generation skill with only expected local-file and optional package-install considerations.

This appears safe for normal slide creation. Before installing, be aware that PPT conversion may require installing Python packages, image handling will read files from the folder you provide, and optional browser editing may save text locally.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If you use PPT conversion, the skill may require installing Python packages into your environment.

Why it was flagged

The skill documents an optional shell-based installation of third-party Python packages for PPT conversion. This is expected for the feature, but package versions are not pinned.

Skill content
kind: shell ... command: "pip install python-pptx Pillow" ... optional: true
Recommendation

Install these only when needed, preferably in a virtual environment, and consider pinning or verifying package versions.

What this means

The agent may inspect all supported image files in the folder you point it to.

Why it was flagged

The skill tells the agent to enumerate and read image files from a folder the user provides. This is aligned with building image-based slides, but it gives the agent access to every matching image in that folder.

Skill content
1. `ls` the folder — find all `.png/.jpg/.jpeg/.gif/.svg/.webp`
2. Read each image file locally using the `read` tool
Recommendation

Use a dedicated presentation-assets folder and avoid pointing the skill at broad or sensitive directories.

What this means

If a deck contains sensitive text and is opened in a shared browser profile, edits may persist locally.

Why it was flagged

Browser localStorage is persistent local storage. Optional inline editing can leave edited slide text saved in the browser after the presentation is closed.

Skill content
**Inline Editing** — Optional in-browser text editing with localStorage auto-save.
Recommendation

Disable inline editing for sensitive decks or clear the presentation’s localStorage after use on shared machines.