Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

html-ppt-zc

v1.0.0

自动生成 PPT(或 HTML 演示) 的技能,接受标题和正文,使用 python-pptx 库快速生成 .pptx 文件,可选导出为 HTML。

0· 19·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for openclawzhangchong/html-ppt-zc.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "html-ppt-zc" (openclawzhangchong/html-ppt-zc) from ClawHub.
Skill page: https://clawhub.ai/openclawzhangchong/html-ppt-zc
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Required binaries: python
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Canonical install target

openclaw skills install openclawzhangchong/html-ppt-zc

ClawHub CLI

Package manager switcher

npx clawhub@latest install html-ppt-zc
Security Scan
Capability signals
Crypto
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The name/description (“generate PPT or HTML using python-pptx”) matches the core script (generate_ppt.py) which creates .pptx files and can output simple HTML. However, the package includes a large template.html and motion.min.js which the script does not use, and SKILL.md mentions optional jinja2/template-driven HTML export even though the Python code writes a very simple HTML. The SKILL.md examples also reference a different local path name (guizang_ppt) than the skill slug — a documentation mismatch.
Instruction Scope
SKILL.md instructions are limited to running the Python script and installing python-pptx/jinja2. The script itself only reads the provided --text/--title args and writes the output path. It does not access other environment variables, network endpoints, or arbitrary system files. The mismatch: SKILL.md implies a richer HTML/template export (and mentions jinja2) but generate_ppt.py's export_html writes a minimal static HTML and does not reference assets/template.html or assets/motion.min.js.
Install Mechanism
No install spec; this is an instruction+code bundle that requires Python and python-pptx (and optionally jinja2 per docs). Nothing is downloaded or written by an installer during install, lowering install-time risk.
Credentials
The skill requests no environment variables, no credentials, and no config paths. The operations (reading provided text and writing the output file) are proportionate to its stated purpose.
Persistence & Privilege
Flags show always:false and normal invocation. The skill does not request persistent presence or attempt to modify other skills or system-wide settings.
What to consider before installing
This skill's core Python script appears benign and does what the description promises (create PPTX from text). However, note these inconsistencies before installing or running: (1) SKILL.md mentions jinja2 and a template-based HTML export, but generate_ppt.py uses a very simple HTML exporter and does not load assets/template.html or assets/motion.min.js — the included assets appear unused. (2) template.html references external Google Fonts (network connections occur if you open that HTML in a browser). (3) SKILL.md examples reference a different local path (guizang_ppt) than the skill slug — the docs may be stale. (4) Small robustness note: create_ppt uses os.makedirs(os.path.dirname(output), exist_ok=True) which will behave oddly if you pass a bare filename (no directory); test in a safe folder first. Recommended steps: (A) inspect assets/template.html and assets/motion.min.js yourself before using them or serving generated HTML to others, (B) run the script locally with non-sensitive test data to confirm behavior, (C) ensure python-pptx is the only third-party library you install, and (D) if you expect a styled HTML export, request clarification or update from the author because the shipped script does not use the template or jinja2 as described.

Like a lobster shell, security has layers — review code before you run it.

Runtime requirements

📊 Clawdis
Binspython
latestvk97fqvh6ahn7861ka067tpkpr585k1t3
19downloads
0stars
1versions
Updated 5h ago
v1.0.0
MIT-0

Guizang PPT Skill

功能概述

  • 生成 PPT:依据提供的标题和文本内容,自动拆分成幻灯片,每段落生成一页,支持标题页、目录页和内容页。
  • 可选导出 HTML:使用内置模板将 PPT 转换为可在浏览器直接展示的 HTML 演示文稿。
  • 自定义样式:可通过可选参数指定配色、字体大小、页眉页脚等基础样式。

环境依赖

  • Python(系统已安装)。
  • python-pptx 库:pip install -U python-pptx
  • jinja2(用于 HTML 导出,可选):pip install -U jinja2

确保上述库已安装,python -c "import pptx" 不会报错即表示可用。

使用方法(Windows CMD / PowerShell)

1. 生成 PPT(默认)

python "%USERPROFILE%\.openclaw\workspace\skills\guizang_ppt\generate_ppt.py" \
  --title "<演示标题>" \
  --text "<每行代表一段落的正文>" \
  --output "C:\\Path\\to\\output.pptx"
  • --title:演示标题(将生成封面页)。
  • --text:多行文字,脚本会按换行拆分为幻灯片内容,每行生成一个要点列表;若段落之间留空行,会产生新幻灯片。
  • --output:生成的 .pptx 文件路径。

2. 导出 HTML 演示

python "%USERPROFILE%\.openclaw\workspace\skills\guizang_ppt\generate_ppt.py" \
  --title "<演示标题>" \
  --text "<正文>" \
  --output "C:\\Path\\to\\output.html" \
  --html

添加 --html 参数将把 PPT 转为 HTML(使用简易模板),便于在浏览器直接查看。

常见问题

  • 缺少 python-pptx:运行 pip install -U python-pptx 安装。
  • 生成的 PPT 打不开:确保 --output 路径所在的文件夹已存在且有写入权限。
  • 文本过长:脚本会自动换行,若单行文字超过幻灯片可容纳宽度,会自动换行为多个要点。

注意事项

  • 本技能仅用于个人学习、内部汇报等合法场景,生成的 PPT 如需对外发布,请自行确认内容版权。
  • 若需要更高级的动画、模板或图表,请在生成的 PPT 基础上手动编辑。

Comments

Loading comments...