Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Gamma Presentation Generator

v1.0.0

Generate professional presentations with Gamma AI. Just describe what you want — topic, outline, or full content — and get a polished deck. No Gamma account...

0· 289·2 current·2 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for lmanchu/gamma-presentation.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Gamma Presentation Generator" (lmanchu/gamma-presentation) from ClawHub.
Skill page: https://clawhub.ai/lmanchu/gamma-presentation
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Required env vars: GAMMA_API_KEY
Required binaries: bun
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install gamma-presentation

ClawHub CLI

Package manager switcher

npx clawhub@latest install gamma-presentation
Security Scan
VirusTotalVirusTotal
Pending
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Name/description match the behavior: the skill calls the Gamma API to create and download presentations. However the prose repeatedly claims 'No Gamma account needed' and 'The skill owner covers this cost — users generate for free', while the code and SKILL.md require a GAMMA_API_KEY (or a local ~/.gamma/config.json). That is a misleading claim about who provides/hosts the API key and who pays.
Instruction Scope
SKILL.md instructs the agent to run a single bundled script (generate.ts) with GAMMA_API_KEY set and to save the resulting PDF/PPTX. The instructions do not ask the agent to read unrelated system files or exfiltrate data beyond contacting the Gamma endpoints and downloading the generated file. The script reads only the env var and ~/.gamma/config.json as a fallback; no other files or credentials are referenced.
Install Mechanism
There is no install spec (instruction-only deployment) and the included code runs locally under Bun. No remote downloads or archive extraction are performed by the skill itself. Required binary 'bun' is reasonable given the TypeScript script.
!
Credentials
The skill requires a single credential (GAMMA_API_KEY), which is appropriate for calling the Gamma API. However: (1) registry metadata lists no primary credential even though GAMMA_API_KEY is required; (2) the documentation's claim that users don't need a Gamma account and that the skill owner pays is inconsistent with the code that uses a key from the environment or a local ~/.gamma/config.json. That mismatch could mislead users into exposing an API key they didn't intend to manage or pay for.
Persistence & Privilege
The skill is not marked always:true and does not request special system privileges. It only reads a local config file (~/.gamma/config.json) as a convenience fallback, and writes the output file to the user-specified path. It does not modify other skills or system-wide agent settings.
What to consider before installing
This skill appears to do what it says (call Gamma to generate decks), but the published description misstates who must provide/pay for the Gamma API key. Before installing: (1) confirm how API keys/billing will be handled — you will need a GAMMA_API_KEY in your environment or a local ~/.gamma/config.json for the script to run; (2) review the bundled generate.ts locally (it is small and readable) and run it yourself rather than trusting a shared key; (3) do not paste a high-privilege or organization-wide Gamma key into a skill you don't fully trust — create a limited/test key if possible; (4) verify the skill's origin (there is no homepage and the owner id is opaque). If these inconsistencies worry you, treat this as untrusted code and run it in an isolated environment or decline installation.
generate.ts:16
Environment variable access combined with network send.
Patterns worth reviewing
These patterns may indicate risky behavior. Check the VirusTotal and OpenClaw results above for context-aware analysis before installing.

Like a lobster shell, security has layers — review code before you run it.

Runtime requirements

🎯 Clawdis
OSmacOS · Linux · Windows
Binsbun
EnvGAMMA_API_KEY
gammavk97a8wma5a9h6mt1pwh6hrw5ax83cwjelatestvk97a8wma5a9h6mt1pwh6hrw5ax83cwjepdfvk97a8wma5a9h6mt1pwh6hrw5ax83cwjepptxvk97a8wma5a9h6mt1pwh6hrw5ax83cwjepresentationvk97a8wma5a9h6mt1pwh6hrw5ax83cwjeslidesvk97a8wma5a9h6mt1pwh6hrw5ax83cwje
289downloads
0stars
1versions
Updated 1mo ago
v1.0.0
MIT-0
macOS, Linux, Windows

Gamma Presentation Generator

Generate polished presentations from a topic or content brief. Uses Gamma AI to create professionally designed slides. The user does not need a Gamma account.

When to Use

Trigger when the user wants to:

  • Create a presentation, deck, or slides
  • "Make me a pitch deck about X"
  • "Generate slides for my talk on Y"
  • "Create a presentation with 10 slides about Z"

Do NOT trigger for:

  • PPTX file editing (use document-skills:pptx instead)
  • HTML/web presentations (use frontend-slides instead)
  • Presenton-specific requests (use presenton instead)

How to Use

Step 1: Gather Requirements

Ask the user (if not already provided):

  • Topic or content: What the presentation is about
  • Audience: Who is this for? (investors, team, conference)
  • Length: How many slides? (default: ~8-10)
  • Format: PDF or PPTX? (default: PDF)

Step 2: Prepare the Input

For best results, compose a structured prompt:

Create a [N]-slide presentation about [TOPIC].

Audience: [WHO]
Tone: [professional/casual/technical]

Key points to cover:
1. [Point 1]
2. [Point 2]
3. [Point 3]

Include: [data, charts, examples, quotes, etc.]

Step 3: Generate

GAMMA_API_KEY="$GAMMA_API_KEY" bun run ~/.claude/skills/gamma/generate.ts \
  --content "$(cat /tmp/gamma-prompt.txt)" \
  --format pdf \
  --output /tmp/presentation.pdf

Or with just a topic:

GAMMA_API_KEY="$GAMMA_API_KEY" bun run ~/.claude/skills/gamma/generate.ts \
  --topic "IrisGo Series A Pitch" \
  --pages 12 \
  --format pdf \
  --output /tmp/pitch-deck.pdf

Step 4: Deliver

  • If output file was saved, tell the user the file path
  • If download failed, provide the Gamma URL for manual export
  • Offer to open the file or share the link

Configuration

The API key is stored in the environment. Do not expose it to the user.

# Set in your shell profile or .env
export GAMMA_API_KEY="sk-gamma-..."

Limitations

  • Gamma AI designs the slides — layout and visual style are Gamma's choice
  • Export to PDF/PPTX may require the Gamma URL (direct download not always available)
  • Generation takes 30-90 seconds depending on complexity
  • Content is limited by Gamma's input length (~4000 chars recommended)

Cost

Each generation costs Gamma credits (~$0.01/credit, typical deck = 50-100 credits). The skill owner covers this cost — users generate for free.

Comments

Loading comments...