Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

academic-presentation-学术汇报全自动化-只需提供论文(PDF 或文本),即可自动生成翻译稿、总结稿、PPT 和演讲稿,所有文件完成后自动发送到微信

v1.0.1

学术汇报全自动化 — 将论文转化为翻译稿(Word)、总结(Word)、PPT、演讲稿全套物料,完成后自动发送到微信。触发词:学术汇报、论文汇报、做PPT、论文演讲、学术PPT、汇报PPT

1· 67·0 current·0 all-time
byjunjie Feng@j-feng12

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for j-feng12/academic-presentation.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "academic-presentation-学术汇报全自动化-只需提供论文(PDF 或文本),即可自动生成翻译稿、总结稿、PPT 和演讲稿,所有文件完成后自动发送到微信" (j-feng12/academic-presentation) from ClawHub.
Skill page: https://clawhub.ai/j-feng12/academic-presentation
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install academic-presentation

ClawHub CLI

Package manager switcher

npx clawhub@latest install academic-presentation
Security Scan
Capability signals
Requires sensitive credentials
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Pending
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The skill's stated purpose (convert a paper to translation, summary, PPT and send to WeChat) aligns with the instructions. However metadata mismatches stand out: the skill declares a primaryEnv 'PPT_API_PROVIDER' (not an actual API key name) while the instructions expect ANYGEN_API_KEY or GAMMA_API_KEY. The declared required env list is empty even though external PPT APIs and a WeChat channel are required in practice.
!
Instruction Scope
Instructions explicitly read user-provided PDF/text, create files under /tmp/academic-ppt/, call external PPT APIs (anygen/gamma) and automatically send the generated files to WeChat via a message(...) call. The SKILL.md asserts '不会上传到任何第三方服务器' which is inconsistent with the anygen/gamma calls (these will send content to third-party services). The skill will process and transmit user document contents to external APIs and to the configured WeChat channel — this is expected for the feature but the documentation's privacy claim is misleading.
Install Mechanism
Instruction-only skill with no install spec or downloaded code — lowest install risk. It relies on platform tools/CLI (anygen CLI or curl to gamma) but does not itself install binaries.
!
Credentials
The skill needs API keys for external PPT services (ANYGEN_API_KEY or GAMMA_API_KEY) and a WeChat user_openid/config, which are proportionate to the functionality. But the package/metadata do not declare those required env vars consistently (primaryEnv is an unexplained 'PPT_API_PROVIDER', requires.env is empty). Storing user_openid in the skill config grants the skill the ability to route files to a specific WeChat recipient — this is sensitive and should be explicitly documented and consented to.
Persistence & Privilege
always:false and no install script. The skill stores its own config under ~/.openclaw/skills/academic-presentation/config.json which is normal. It does request the ability to send files via the platform's WeChat channel; autonomous invocation is allowed by default (not flagged here) but combined with data-sending behaviors increases blast radius.
Scan Findings in Context
[unicode-control-chars] unexpected: The SKILL.md contains unicode control characters that the static scanner flagged as a prompt-injection pattern. That is not expected for a purely instructional workflow and could be an attempt to manipulate downstream LLM behavior or evaluation. Recommend the author remove or explain these characters and re-publish a clean copy.
What to consider before installing
This skill appears to do what it promises (generate translation, summary, PPT and send to WeChat), but there are three things you should verify before installing or using it with sensitive papers: 1) Clarify environment variables and privacy: the metadata does not list the actual API keys but the instructions require ANYGEN_API_KEY or GAMMA_API_KEY — confirm exactly which vars the skill will read and where keys are stored. 2) Understand data flow: the skill will send your document contents to external PPT services (anygen/gamma) and to your WeChat account; the SKILL.md's claim that it does not upload to third parties is incorrect or incomplete. If your paper is confidential, do not send it until you confirm the provider's handling and retention policies. 3) Prompt-injection artifacts: the SKILL.md contains unicode control characters flagged as potential prompt-injection. Ask the author to provide a cleaned SKILL.md and explain why those characters were present. Additional recommendations: test with non-sensitive documents first, confirm WeChat recipient (user_openid) and platform message routing behavior, and require the developer to fix the metadata to explicitly declare required env vars and the primary credential name.

Like a lobster shell, security has layers — review code before you run it.

Runtime requirements

Primary envPPT_API_PROVIDER
latestvk97fhzntt5gnkfmmj4xxr17amx84wm0r
67downloads
1stars
2versions
Updated 1w ago
v1.0.1
MIT-0

学术汇报全自动化 (v2.0.0)

将论文转化为包含翻译、总结、PPT及演讲稿的全套物料,完成后自动发送到微信。

v2.0.0 更新(重构)

  • 🆕 PPT 平台可配置:支持 anygen / gamma.app / 手动下载
  • 🆕 无密钥嵌入:API Key 由用户自行配置
  • ✅ Word 文档输出(翻译稿、总结稿)
  • ✅ 逐字演讲稿
  • ✅ 微信自动发送

支持的 PPT 平台

平台API Key 环境变量说明
anygen.ioANYGEN_API_KEY推荐,支持中文,生成质量高
gamma.appGAMMA_API_KEY需自行申请
跳过PPT仅生成 Word 文档和演讲稿

首次使用配置

首次触发时,会询问 PPT 平台选择:

🎓 您好!已为您激活 学术汇报全自动化 技能(v2.0.0)。

请选择 PPT 生成方式:

  1. anygen — 推荐,已集成(需 API Key)
  2. gamma.app — 需提供 GAMMA_API_KEY
  3. 跳过 PPT — 仅生成 Word 文档和演讲稿

工作流(6 + 1 阶段)

🟢 Stage 1:接收文档

动作:用户提供论文内容(PDF 文件路径或直接粘贴文本)

逻辑

  • 读取标题,设定变量 [Doc_Title]
  • 识别语言(中文/英文/其他)
  • 非中文询问是否翻译

确认语:「已收到文档,标题:[Doc_Title],语言:{语言}。是否需要翻译为中文?」


🟢 Stage 2:翻译 → Word 文档

动作:将论文核心内容翻译为中文,输出 .docx

输出/tmp/academic-ppt/[Doc_Title]_翻译稿.docx

方式:使用 python-docx 生成 Word 文档

确认语:「翻译完成!Word 文档已保存。是否继续?」


🟢 Stage 3:总结 → Word 文档

动作:提炼论文核心框架,输出 .docx

输出/tmp/academic-ppt/[Doc_Title]_总结.docx

结构:研究背景、核心贡献、方法与架构、实验结果、结论与局限

确认语:「总结完成!是否进入 PPT 大纲设计?」


🟢 Stage 4:PPT大纲设计

动作:根据总结设计 10-15 页 PPT 大纲

输出格式

### Slide 1:标题页
- 要点:...

### Slide 2:研究背景
- 要点:...

确认语:「大纲完成(共 X 页)。确认后进入 PPT 生成阶段。」


🟢 Stage 5:生成 PPT(平台可选)

根据用户选择的平台执行

方案 A:anygen(推荐)

# 1. 准备任务
anygen task prepare --data '{"operation":"slide","messages":[{"role":"user","content":{"text":"[PPT需求]"}}]}'

# 2. 从响应获取 suggested_task_params,创建任务
anygen task create --data '{"operation":"slide","prompt":"[final_prompt]"}'

# 3. 轮询等待完成(可能需要几分钟)
anygen task get --params '{"task_id":"<id>"}' --wait --timeout 600000

# 4. 下载
anygen task +download --task-id <id> --output-dir /tmp/academic-ppt/

方案 B:gamma.app

# 使用 gamma API(需用户提供 API Key)
curl -X POST https://api.gamma.app/v1/presentations \
  -H "Authorization: Bearer $GAMMA_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"title":"[Doc_Title]","slides":[...]}'

方案 C:跳过

跳过 PPT 生成,仅生成 Word 和演讲稿

输出

  • PPT 文件:/tmp/academic-ppt/*.pptx(如有)
  • 或告知用户手动下载链接

确认语:「PPT 生成完成(或已跳过)。是否进入演讲稿撰写阶段?」


🟢 Stage 6:撰写演讲稿

动作:根据 PPT 大纲撰写逐字稿(Markdown)

输出/tmp/academic-ppt/speech_notes.md

风格:口语化、连贯、包含过渡句

确认语:「演讲稿完成!全套物料已生成。」


🟢 Stage 7(自动):发送文件到微信

自动执行,通过 message 工具发送所有文件:

message(action="send", channel="openclaw-weixin", media="<filepath>")

发送内容

  • [Doc_Title]_翻译稿.docx
  • [Doc_Title]_总结.docx
  • *.pptx(如有)
  • speech_notes.md

输出

✅ 全套学术汇报物料已生成!

📄 [Doc_Title]_翻译稿.docx
📄 [Doc_Title]_总结.docx
📊 [PPT文件名].pptx(如有)
📝 speech_notes.md

文件已发送到您的微信!

配置管理

配置文件~/.openclaw/skills/academic-presentation/config.json

结构

{
  "ppt_provider": "anygen|gamma|skip",
  "ppt_api_key_env": "ANYGEN_API_KEY|GAMMA_API_KEY",
  "user_openid": "<微信openid>"
}

查看/修改配置

  • 询问用户当前配置
  • 需要修改时说"重新配置学术汇报"

文件输出目录

所有文件:/tmp/academic-ppt/

文件名:

  • [Doc_Title]_翻译稿.docx
  • [Doc_Title]_总结.docx
  • *.pptx
  • speech_notes.md

快速触发

  • 「学术汇报」
  • 「论文汇报」
  • 「帮我做PPT」
  • 「论文转PPT」
  • 「做学术汇报」
  • 「重新配置学术汇报」

发布信息

Comments

Loading comments...