DeckCraft

PassAudited by VirusTotal on May 6, 2026.

Overview

Type: OpenClaw Skill Name: deckcraft Version: 1.0.0 The DeckCraft skill is a legitimate tool for generating PowerPoint presentations. The provided Python scripts (analyze_template.py and generate_ppt.py) use the standard python-pptx library to analyze templates and create slides based on user-provided outlines and styles. There is no evidence of data exfiltration, malicious command execution, or prompt injection; the code and instructions are strictly aligned with the stated purpose of presentation generation.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Installing the dependency is necessary for the local scripts, but it adds normal package-supply-chain risk.

Why it was flagged

The skill requires a Python package and includes helper scripts, but the registry install spec is empty. This is expected for a PPT-generation helper, but users should install dependencies from trusted sources.

Skill content
```bash
pip install python-pptx
```
Recommendation

Install python-pptx from a trusted package index and review the included scripts before use, especially because the skill source has no homepage.

What this means

Templates or slide content you upload may remain in the local template library and be reused or referenced later.

Why it was flagged

Uploaded templates can be saved persistently and cataloged for reuse. This is disclosed and aligned with template support, but retained decks/templates may contain sensitive business content.

Skill content
- Directory: `templates/` (user-managed, grows over time)
- Catalog: `templates/README.md` (auto-updated when templates are added)
Recommendation

Only save templates you are comfortable retaining locally, and periodically review or delete the templates/ library if it contains sensitive material.