Gamma Presentations
PassAudited by ClawScan on May 1, 2026.
Overview
This instruction-only skill is coherent with its Gamma presentation-creation purpose, but users should handle the Gamma API key carefully and understand that provided content is sent to Gamma.
This skill appears safe to install as an instruction-only Gamma API helper. Before using it, provide the Gamma API key through a safer mechanism such as an environment variable, avoid placing secrets in shared files, and only submit content that you are comfortable sending to Gamma’s service.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Anyone installing or using the skill may need to provide a Gamma API key, which could allow creation requests or credit usage on that Gamma account.
The skill requires a Gamma API key to act on the user’s Gamma account and consume Gamma API access; this is expected for the integration but is not declared in the registry metadata.
Store in environment: `export GAMMA_API_KEY=sk-gamma-xxx` Or add to TOOLS.md: `Gamma API Key: sk-gamma-xxx`
Prefer an environment variable or a secrets manager over putting the key in TOOLS.md, do not commit or share the key, and rotate it if it may have been exposed.
Text, image URLs, and generation instructions provided to the skill may be sent to Gamma and may consume account credits.
The skill documents direct API calls that submit user-provided content to Gamma for generation. This is central to the stated purpose, but it is still a third-party content transfer and account action.
curl -X POST https://public-api.gamma.app/v1.0/generations ... -H "X-API-KEY: $GAMMA_API_KEY" ... "inputText": "Your content here"
Use it only for content you are comfortable sending to Gamma, and review sensitive or confidential material before asking the agent to generate a deck or document.