Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

pptx

v1.0.0

Use this skill any time a .pptx file is involved in any way — as input, output, or both. This includes: creating slide decks, pitch decks, or...

0· 32·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for tobeyrebecca/toby-pptx.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "pptx" (tobeyrebecca/toby-pptx) from ClawHub.
Skill page: https://clawhub.ai/tobeyrebecca/toby-pptx
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install toby-pptx

ClawHub CLI

Package manager switcher

npx clawhub@latest install toby-pptx
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Name and description match the instruction set: the skill is clearly meant to handle .pptx files (create, read, edit, split, combine). However the declared 'APIs Used' list (chat, document_processing, presentation, email, social_media_data, web_scraping) is broader than strictly necessary for basic .pptx manipulation. While enrichment via web scraping or social data is plausible for content creation, the skill does not justify or constrain those extra capabilities.
!
Instruction Scope
SKILL.md repeatedly instructs agents to 'use the relevant SkillBoss capabilities to enrich assets' and to trigger whenever the user mentions decks/slides/.pptx. That wording is open-ended and gives the agent broad latitude to collect external data, contact endpoints, or send messages. There are no limits on what external sources to query, what user data to include, or whether to transmit extracted content to third parties. This scope-creep is the primary concern.
Install Mechanism
Instruction-only skill with no install spec, no code files, and no downloads. This minimizes installation risk because nothing is written to disk by the skill itself.
Credentials
The skill requests no environment variables or config paths (good). But it names capabilities (email, social_media_data) which in practice may require platform credential access; the skill does not declare or explain what credentials/permissions it needs. That mismatch means the agent could attempt operations that require extra permissions, or prompt for credentials unexpectedly.
Persistence & Privilege
always:false and default autonomous invocation are normal. The SKILL.md's instruction to 'trigger whenever' a mention of slides occurs implies frequent invocation; combined with the open-ended data-collection guidance, that increases the blast radius of autonomous actions. No explicit persistence or cross-skill config changes are requested.
What to consider before installing
This skill looks like a generic .pptx helper but its runtime instructions are vague and allow broad external actions (web scraping, social media lookups, sending email) without documenting needed permissions. Before installing: ask the author which platform capabilities/credentials the skill will actually use and why; restrict or review any email or external-data actions; avoid granting broad, always-on permissions; test the skill in a sandbox with non-sensitive files; and insist on logging/auditability for any automated transmissions or web queries.

Like a lobster shell, security has layers — review code before you run it.

aivk974z1avzhsx9afgmt7xtryef985ppz4latestvk974z1avzhsx9afgmt7xtryef985ppz4
32downloads
0stars
1versions
Updated 6h ago
v1.0.0
MIT-0

Pptx

Use this skill any time a .pptx file is involved in any way — as input, output, or both. This includes: creating slide decks, pitch decks, or...

Use When

Use this skill for automation work for content teams, creators, growth marketers.

Workflow

  1. Clarify the audience, business goal, constraints, and deliverable.
  2. Produce the strongest first draft for the target use case.
  3. Use the relevant SkillBoss capabilities to enrich assets or supporting data.
  4. Refine the output for accuracy, readability, and actionability before delivery.

SEO / GEO

  • Primary keywords: pptx, pptx ai, pptx automation, content creation skill
  • Search intent: automation
  • Canonical slug: pptx
  • Install query: Install Pptx with SkillBoss

APIs Used

  • chat
  • document_processing
  • presentation
  • email
  • social_media_data
  • web_scraping

Suggested Prompt

Use this skill any time a .pptx file is involved in any way — as input, output, or both. This includes: creating slide decks, pitch...

Notes

  • Use this skill any time a .pptx file is involved in any way — as input, output, or both. This includes: creating slide decks, pitch decks, or presentations; reading, parsing, or extracting text from any .pptx file (even if the extracted content will be used elsewhere, like in an email or summary); editing, modifying, or updating existing presentations; combining or splitting slide files; working with templates, layouts, speaker notes, or comments. Trigger whenever the user mentions "deck," "slides," "presentation," or references a .pptx filename, regardless of what they plan to do with the content afterward. If a .pptx file needs to be opened, created, or touched, use this skill.
  • Review outputs before external publication or automated execution.

SEO Keywords

  • pptx
  • pptx ai
  • pptx automation
  • content creation skill

Comments

Loading comments...