raccoon ppt skill
v1.0.1Raccoon (小浣熊) PPT generation skill powered by the PPT OpenAPI. Create PPT decks from a natural-language topic. Primarily use this skill when the user wants t...
⭐ 1· 101·0 current·0 all-time
by商汤小浣熊@raccoon-office
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (PPT generation) matches required artifacts: python3, an API host, and an API token. The script calls an /api/open/office/v2 (ppt_jobs) API and implements create/query/reply flows consistent with the described purpose.
Instruction Scope
Runtime instructions consistently limit actions to using the provided scripts, collecting minimal input (prompt/role/scene/audience), and polling the remote PPT API. One notable instruction: it recommends sourcing ~/.zshrc before every run to load env vars. Sourcing a user's shell RC file executes whatever is in that file and is a behavior the user should be aware of (the intent here is to load RACCOON_API_TOKEN/RACCOON_API_HOST into the environment). The skill also reads/writes local state/registry files under the skill directory to persist job state, which is expected for long-running tasks.
Install Mechanism
No install spec (instruction-only with an included script) — lowest install risk. The package does include a Python script but does not fetch remote code at install time or run downloads during install.
Credentials
Only two environment variables are required: RACCOON_API_TOKEN (primary credential) and optional RACCOON_API_HOST. Both are directly used for authenticating to the described PPT OpenAPI and are proportionate to the skill's function.
Persistence & Privilege
Skill is not always-enabled and does not request elevated platform privileges. It persists job state and a job registry to ./output/ within the skill directory and uses file locking — this is reasonable for resume/lookup behavior but means job metadata (including job_id) will exist on disk. SKILL.md explicitly instructs not to expose job_id to end users.
Assessment
This skill appears coherent for generating PPTs via the named API. Before installing, consider: (1) you must provide RACCOON_API_TOKEN — only provide this if you trust the remote service (default host: https://xiaohuanxiong.com or override via RACCOON_API_HOST); (2) the runtime recommends sourcing your ~/.zshrc to load env vars — sourcing runs whatever commands are in that file, so be cautious if your RC contains side-effecting code; (3) the skill will write job state and a registry under the skill's ./output/ directory (so job metadata, including job_id, is stored locally); (4) if you need stronger isolation, avoid setting global tokens in shell RC files and instead set RACCOON_API_TOKEN just for the skill's execution environment. Overall the package is internally consistent with its stated purpose.Like a lobster shell, security has layers — review code before you run it.
latestvk972qcwz1s7z48k5qzgyep7ats83ytew
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🦝 Clawdis
Binspython3
EnvRACCOON_API_HOST, RACCOON_API_TOKEN
Primary envRACCOON_API_TOKEN