gamma

Generate AI-powered presentations, documents, and social posts using SkillBoss API Hub. Use when user asks to create a presentation, pitch deck, slide deck,...

Security Scan

The skill's purpose (generate presentations via SkillBoss) is plausible and the only required secret (SKILLBOSS_API_KEY) matches that purpose, but the shipped script targets an unexpected API domain and invokes undeclared tools (jq), which is an inconsistency that should be clarified before trusting the skill.

Purpose & Capability

The skill claims to use SkillBoss (api.skillbossai.com) and to generate Gamma URLs, which aligns with requesting SKILLBOSS_API_KEY. However, the included script uses API_BASE="https://api.heybossai.com/v1" (a different domain). The source/homepage are unknown, making the domain mismatch unexplained and suspicious.

Instruction Scope

SKILL.md instructs only to call the SkillBoss pilot endpoint and set SKILLBOSS_API_KEY, which is scoped correctly. The actual shell script does only API calls and JSON construction (no broad file or env harvesting), but it directs traffic to an unexpected endpoint (heybossai.com) rather than the documented skillbossai.com, creating a potential redirection/exfiltration risk.

Install Mechanism

There is no install spec (instruction-only), which is lower risk. However, the package includes a runnable script. The script relies on external binaries (curl and jq) but the skill metadata declares no required binaries — a mismatch that can cause runtime failures or hide implicit dependencies.

Credentials

The skill requires a single environment variable, SKILLBOSS_API_KEY, and the script uses that variable as a Bearer token for the API — this is proportionate to the stated purpose.

Persistence & Privilege

The skill does not request always:true, does not modify other skills, and does not persist credentials locally. It runs only when invoked, which is appropriate for this type of integration.

What to consider before installing

Before installing: (1) Verify the correct API hostname with the skill author or official docs — SKILL.md documents api.skillbossai.com but the script sends requests to api.heybossai.com; this mismatch should be explained or corrected. (2) Confirm you trust the target domain (heybossai.com) and that SKILLBOSS_API_KEY is intended for use there. (3) Ensure required binaries (curl, jq) are available and consider reviewing the script locally to verify it only sends intended content and does not exfiltrate extra data. (4) Prefer running the skill in a sandbox or with a limited/test API key first, and compare responses/URLs (e.g., gamma.app export links) to expected provider behavior. If the author can confirm the correct API endpoint and why domains differ (or update the script to use the documented endpoint), the concern would be resolved; otherwise treat this as potentially unsafe.

SkillBoss API Hub — PPT Generation

Generate beautiful presentations, documents, and social posts with AI via SkillBoss API Hub.

Setup

export SKILLBOSS_API_KEY="your-skillboss-api-key"

Quick Commands

# Generate a presentation
{baseDir}/scripts/gamma.sh generate "Your content or topic here"

# Generate with options
{baseDir}/scripts/gamma.sh generate "Content" --format presentation --cards 12

# Check generation status
{baseDir}/scripts/gamma.sh status <generationId>

# List recent generations (if supported)
{baseDir}/scripts/gamma.sh list

Script Usage

Generate

{baseDir}/scripts/gamma.sh generate "<content>" [options]

Options:
  --format       presentation|document|social (default: presentation)
  --cards        Number of cards/slides (default: 10)
  --instructions Additional instructions for styling/tone
  --amount       concise|detailed (default: detailed)
  --tone         e.g., "professional", "casual", "technical"
  --audience     e.g., "investors", "developers", "general"
  --image-source aiGenerated|web|none (default: aiGenerated)
  --image-style  illustration|photo|mixed (default: illustration)
  --wait         Wait for completion and return URL

Examples

# Simple presentation
{baseDir}/scripts/gamma.sh generate "The future of AI automation" --wait

# Pitch deck with specific styling
{baseDir}/scripts/gamma.sh generate "$(cat pitch.md)" \
  --format presentation \
  --cards 15 \
  --instructions "Make it a professional pitch deck for investors" \
  --tone "professional" \
  --audience "investors" \
  --wait

# Social carousel
{baseDir}/scripts/gamma.sh generate "5 tips for productivity" \
  --format social \
  --cards 5 \
  --wait

# Document/report
{baseDir}/scripts/gamma.sh generate "Q4 2025 Performance Report" \
  --format document \
  --amount detailed \
  --wait

API Reference

Endpoint

POST https://api.skillbossai.com/v1/pilot

Headers

Authorization: Bearer <SKILLBOSS_API_KEY>
Content-Type: application/json

Request Body

{
  "type": "ppt",
  "inputs": {
    "inputText": "Your content (1-750,000 chars)",
    "textMode": "generate",
    "format": "presentation|document|social",
    "numCards": 10,
    "additionalInstructions": "Styling instructions",
    "textOptions": {
      "amount": "concise|detailed",
      "tone": "professional",
      "audience": "target audience"
    },
    "imageOptions": {
      "source": "aiGenerated|web|none",
      "style": "illustration|photo"
    },
    "cardOptions": {
      "dimensions": "fluid|16x9|4x3|1x1|4x5|9x16"
    }
  },
  "prefer": "balanced"
}

Response

SkillBoss API Hub returns synchronously (result path: result.gammaUrl):

{
  "status": "success",
  "result": {
    "generationId": "...",
    "status": "completed",
    "gammaUrl": "https://gamma.app/docs/xxxxx",
    "exportUrl": "https://...",
    "credits": {"deducted": 13, "remaining": 9999}
  }
}

Format Options

Format	Dimensions	Use Case
presentation	fluid, 16x9, 4x3	Pitch decks, slide shows
document	fluid, pageless, letter, a4	Reports, docs
social	1x1, 4x5, 9x16	Instagram, LinkedIn carousels

Notes

• Generation is handled by SkillBoss API Hub, which automatically routes to the best PPT generation model
• Input text can be markdown formatted
• Use --wait flag to block until completion and get URL directly