Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Baidu Wenku AIPPT

v2.0.0

Generate PPT by providing a topic; choose a template style or let Baidu AI auto-select the most suitable design for your content.

0· 75·0 current·0 all-time
byStav Cohen@stavc

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for stavc/baidu-wenku-aippt.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Baidu Wenku AIPPT" (stavc/baidu-wenku-aippt) from ClawHub.
Skill page: https://clawhub.ai/stavc/baidu-wenku-aippt
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install baidu-wenku-aippt

ClawHub CLI

Package manager switcher

npx clawhub@latest install baidu-wenku-aippt
Security Scan
Capability signals
Requires sensitive credentials
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The scripts directly call Baidu endpoints (qianfan.baidubce.com) to generate PPTs and handle template selection — this matches the skill's stated purpose. However, registry metadata lists no required env vars or binaries while SKILL.md and the code require python3 and an environment variable BAIDU_API_KEY; that mismatch is unexpected and inconsistent with the registry record.
Instruction Scope
SKILL.md instructs the agent to run the included Python scripts and wait for streaming responses; the scripts only read BAIDU_API_KEY and interact with the Baidu PPT API. The instructions do not ask the agent to read unrelated files or credentials, nor to send data to third-party endpoints outside the Baidu service.
Install Mechanism
There is no install spec (instruction-only + included scripts), so nothing arbitrary will be downloaded or extracted during install. Note: the package assumes Python and the 'requests' library at runtime but does not declare or install that dependency explicitly.
!
Credentials
The code expects a BAIDU_API_KEY environment variable (and SKILL.md declares it as primaryEnv), which is appropriate for a Baidu integration. However, the registry-level 'Requirements' block claims no required env vars and lists none — this discrepancy (and the differing primaryEnv in SKILL.md) is an incoherence that should be resolved before trusting the package. No other credentials are requested by the scripts.
Persistence & Privilege
The skill does not request always:true, does not modify other skills or system configs, and does not persist new credentials; runtime behavior appears limited to calling Baidu APIs and streaming results.
What to consider before installing
This package appears to implement a Baidu Wenku PPT generator and only needs a BAIDU_API_KEY and Python, but several inconsistencies in the package metadata suggest sloppy or possibly careless packaging rather than outright malicious behavior. Before installing: 1) Verify the BAIDU_API_KEY requirement — do not provide unrelated credentials. 2) Confirm the publisher and origin (there is no homepage and _meta.json slug/owner differ from the registry entry). 3) Ensure you run it in an isolated environment (or sandbox) and that Python's 'requests' is installed. 4) Inspect or run the scripts locally to confirm they only call the expected Baidu endpoints (qianfan.baidubce.com) and do not exfiltrate other data. 5) Ask the publisher for a canonical source/repository or signed release; consistent metadata and a public homepage would raise confidence. If you need higher assurance, demand corrected registry metadata (declaring BAIDU_API_KEY and python3) and a linked upstream repo before use.

Like a lobster shell, security has layers — review code before you run it.

latestvk977r0m7aee772m41k1p7m6dsd8515ty
75downloads
0stars
1versions
Updated 1w ago
v2.0.0
MIT-0

---

name: Baidu Wenku AIPPT description: Generate PPT with Baidu Wenku AI. Smart template selection based on content. metadata: { "openclaw": { "emoji": "📑", "requires": { "bins": ["python3"], "env":["BAIDU_API_KEY"]},"primaryEnv":"BAIDU_API_KEY" } }

AI PPT Generator - Staj

Generate PPT using Baidu AI with intelligent template selection.

Smart Workflow

  1. User provides PPT topic
  2. Agent asks: "Want to choose a template style?"
  3. If yes → Show styles from ppt\_theme\_list.py → User picks → Use generate\_ppt.py with chosen tpl\_id and real style\_id
  4. If no → Use random\_ppt\_theme.py (auto-selects appropriate template based on topic content)

Intelligent Template Selection

random\_ppt\_theme.py analyzes the topic and suggests appropriate template:

  • Business topics → 企业商务 style
  • Technology topics → 未来科技 style
  • Education topics → 卡通手绘 style
  • Creative topics → 创意趣味 style
  • Cultural topics → 中国风 or 文化艺术 style
  • Year-end reports → 年终总结 style
  • Minimalist design → 扁平简约 style
  • Artistic content → 文艺清新 style

Scripts

  • scripts/ppt\_theme\_list.py - List all available templates with style_id and tpl_id
  • scripts/random\_ppt\_theme.py - Smart template selection + generate PPT
  • scripts/generate\_ppt.py - Generate PPT with specific template (uses real style_id and tpl_id from API)

Key Features

  • Smart categorization: Analyzes topic content to suggest appropriate style
  • Fallback logic: If template not found, automatically uses random selection
  • Complete parameters: Properly passes both style_id and tpl_id to API

Usage Examples

# List all templates with IDs
python3 scripts/ppt\_theme\_list.py

# Smart automatic selection (recommended for most users)
python3 scripts/random\_ppt\_theme.py --query "人工智能发展趋势报告"

# Specific template with proper style\_id
python3 scripts/generate\_ppt.py --query "儿童英语课件" --tpl\_id 106

# Specific template with auto-suggested category
python3 scripts/random\_ppt\_theme.py --query "企业年度总结" --category "企业商务"

Agent Steps

  1. Get PPT topic from user

  2. Ask: "Want to choose a template style?"

  3. If user says YES:

    • Run ppt\_theme\_list.py to show available templates
    • User selects a template (note the tpl_id)
    • Run generate\_ppt.py --query "TOPIC" --tpl\_id ID
  4. If user says NO:

    • Run random\_ppt\_theme.py --query "TOPIC"
    • Script will auto-select appropriate template based on topic
  5. Set timeout to 300 seconds (PPT generation takes 2-5 minutes)

  6. Monitor output, wait for is\_end: true to get final PPT URL

Output Examples

During generation:

{"status": "PPT生成中", "run\_time": 45}

Final result:

{
  "status": "PPT导出结束", 
  "is\_end": true, 
  "data": {"ppt\_url": "https://image0.bj.bcebos.com/...ppt"}
}

Technical Notes

  • API integration: Fetches real style_id from Baidu API for each template
  • Error handling: If template not found, falls back to random selection
  • Timeout: Generation takes 2-5 minutes, set sufficient timeout
  • Streaming: Uses streaming API, wait for is\_end: true before considering complete

Comments

Loading comments...