Codex PPT

PassAudited by ClawScan on May 11, 2026.

Overview

This appears to be a legitimate PowerPoint-generation skill, with normal but noteworthy use of Python dependencies, an optional OpenAI-compatible API key, and external image-generation calls.

This skill looks reasonable to install if you want image-based PPT generation. Prefer the built-in image tool when available, use a dedicated API key for fallback mode, and be careful with confidential documents if using OpenAI or a third-party proxy.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

NoteHigh Confidence

ASI03: Identity and Privilege Abuse

What this means

If fallback mode is used, the skill can make API calls using the configured key, which may incur costs or access the configured provider account.

Why it was flagged

The skill can store and use an API key for image generation. This is disclosed and purpose-aligned, but it is still sensitive account access.

Skill content

`OPENAI_API_KEY` is required for real API/CLI fallback calls... The config is written to: `~/.codex-ppt-skill/.env`... The file is created with mode `0600`.

Recommendation

Use a dedicated API key if possible, verify the configured base URL, and remove or rotate the key if you no longer use the skill.

NoteHigh Confidence

ASI07: Insecure Inter-Agent Communication

What this means

Deck source material or slide prompts may be processed by an external image provider when API/CLI fallback is used.

Why it was flagged

Fallback image generation can send prompts/content to OpenAI or a user-configured third-party compatible endpoint.

Skill content

`OPENAI_BASE_URL` is optional. When it is unset, the CLI uses the official OpenAI API. When it is set, the CLI treats the request as a third-party OpenAI-compatible proxy request.

Recommendation

Avoid sending highly confidential material to untrusted providers, and only configure a third-party proxy you trust.

NoteMedium Confidence

ASI04: Agentic Supply Chain Vulnerabilities

What this means

Installing dependencies may fetch newer package versions than the author tested.

Why it was flagged

The documented bootstrap flow relies on Python packages with lower-bound version ranges rather than pinned exact versions.

Skill content

python-pptx>=1.0.2
Pillow>=10.0.0
openai>=2.0.0

Recommendation

Run the skill in an isolated environment and consider pinning or reviewing dependency versions in stricter environments.