Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

html2pptx

v3.0.0

将HTML演示文稿转换为PowerPoint(PPTX)格式。支持frontend-slides生成的HTML,保留结构、样式和内容。触发词:html转pptx、html2pptx、转换ppt、生成pptx

0· 62·0 current·0 all-time
bychang@liberalchang

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for liberalchang/html2pptx.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "html2pptx" (liberalchang/html2pptx) from ClawHub.
Skill page: https://clawhub.ai/liberalchang/html2pptx
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install html2pptx

ClawHub CLI

Package manager switcher

npx clawhub@latest install html2pptx
Security Scan
VirusTotalVirusTotal
Pending
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The code (src/convert.py) and SKILL.md describe a Python-based HTML→PPTX converter using BeautifulSoup and python-pptx, which is coherent with the skill description. However, the repository also includes Node artifacts (package.json, package-lock.json with pptxgenjs) that are unrelated to the declared Python implementation — this is disproportionate and likely a leftover or copy/paste from another project.
Instruction Scope
SKILL.md instructions are narrowly scoped (parse HTML slides, map to PPTX, save file) and require only the declared Python libs. There is no instruction to read unrelated system files or credentials. But tests and README reference different module/file names (tests import src.converter; README lists src/main.py, converter.py, venv_manager.py, etc.) which is inconsistent with the actual file layout and could cause confusion or unexpected behavior when an agent follows the instructions.
Install Mechanism
There is no install spec (instruction-only), which is low risk. Still, presence of package.json and package-lock.json (Node dependencies) is unnecessary for a Python-only runtime and could entice someone to run npm install — bringing in unrelated packages. No download-from-URL or other high-risk install mechanism is present.
Credentials
The skill requests no environment variables, no credentials, and no config paths. The declared Python dependencies (python-pptx, beautifulsoup4, lxml/html5lib) are proportionate to the stated task.
Persistence & Privilege
The skill is not always-enabled and does not request elevated persistence or modification of other skills. Autonomous invocation (default) is allowed but not combined with other red flags.
What to consider before installing
This package appears to implement an HTML→PPTX converter in Python, which matches the SKILL.md. However, there are multiple packaging inconsistencies: README and tests reference different filenames/modules than the actual src/convert.py file, and Node package files (package.json, package-lock.json) are present though not needed. Before installing or invoking this skill you should: 1) inspect src/convert.py fully to confirm there are no network calls or subprocess/spawned installs; 2) run the code in an isolated environment (a disposable Python venv or sandbox) and run the included tests to see failures and understand expected inputs; 3) avoid running npm install unless you understand why Node deps are present; 4) ask the author/source for clarification (why Node files exist, and why tests/README reference different filenames). These inconsistencies are likely packaging sloppiness but warrant caution — treat as suspicious until the provenance and structure are clarified.

Like a lobster shell, security has layers — review code before you run it.

latestvk97ebaqe0gj55a6fwz0rsj7s8n84wbpx
62downloads
0stars
1versions
Updated 1w ago
v3.0.0
MIT-0

HTML to PPTX 转换器

将HTML演示文稿(特别是frontend-slides生成的)转换为原生PowerPoint(.pptx)文件。

使用场景

  • 将frontend-slides生成的HTML演示文稿转换为可编辑的PPT
  • 保留幻灯片结构、文字内容和基本样式
  • 批量转换多个HTML文件

使用方法

基本用法

python src/convert.py <input.html> [output.pptx]

示例

# 转换单个文件
python src/convert.py presentation.html

# 指定输出路径
python src/convert.py presentation.html ~/Documents/output.pptx

支持的内容

HTML元素PPTX转换
<section class="slide">幻灯片页
<h1>, <h2>标题
<p>段落文本
<ul>, <ol>, <li>列表
<div class="card">文本框分组
<img>图片(保留路径)
CSS颜色尝试匹配主题色

转换流程

  1. 解析HTML - 使用BeautifulSoup提取slide结构
  2. 分析样式 - 提取CSS颜色、字体信息
  3. 创建PPTX - 使用python-pptx生成幻灯片
  4. 映射内容 - 将HTML元素映射到PPTX形状
  5. 保存文件 - 输出.pptx文件

限制说明

  • 复杂CSS动画无法转换
  • 渐变背景转为纯色
  • 自定义字体可能丢失
  • 绝对定位元素需要手动调整

依赖安装

pip install python-pptx beautifulsoup4 lxml

文件结构

html2pptx/
├── SKILL.md          # 本文件
├── src/
│   └── convert.py    # 主转换脚本
└── examples/         # 示例文件

Comments

Loading comments...