Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Web Slides

v2.0.4

专业单页面HTML PPT生成器。Use when user needs to create beautiful HTML presentations. Supports multiple themes, mobile-friendly, export to PDF. 单页PPT、HTML演示文稿、PPT生成。

0· 183·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for tobewin/web-slides.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Web Slides" (tobewin/web-slides) from ClawHub.
Skill page: https://clawhub.ai/tobewin/web-slides
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Required binaries: node
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install web-slides

ClawHub CLI

Package manager switcher

npx clawhub@latest install web-slides
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description (HTML single-file slide generator) matches the included files and scripts: multiple theme docs, layout rules, and Node scripts to scaffold, validate, generate HTML, and render previews. Required binary 'node' is appropriate. No unrelated credentials or services are requested.
Instruction Scope
SKILL.md explicitly instructs the agent to read local reference files and run the included node scripts (e.g., generate-slide-html.mjs, markdown-to-content.mjs). The scripts operate on local files and produce HTML/PNG outputs. There are no instructions to read unrelated system files, access secret environment variables, or send data to external endpoints.
Install Mechanism
This is instruction-only (no install spec), which keeps risk low. One inconsistency: SKILL.md frontmatter contains a dependencies string ('npm install -g @aspect-ratio/preview-renderer') even though there is no automated install spec and the codebase does not reference that package. That string may be a leftover or a manual recommendation; avoid blindly running global npm installs from unknown packages.
Credentials
The skill declares no required env vars or credentials. Some scripts use an optional CHROME_BIN env var to override a default Chrome binary for headless rendering — this is reasonable for preview rendering and is not a secret. No API keys or unrelated credentials are requested.
Persistence & Privilege
Skill has always: false and does not request persistent/system-wide privileges. It does not modify other skills or system configuration. Scripts write outputs to local dist/ paths only.
Assessment
This skill appears to do what it says: produce single-file HTML slide decks using Node scripts and local theme files. Before installing or running anything: 1) Ensure you have Node installed. 2) Avoid running any suggested global npm install command (the SKILL.md mentions @aspect-ratio/preview-renderer but the code does not reference it) until you verify the package and trust its source. 3) If you want preview PNGs, the scripts call headless Chrome (uses a macOS default path and optionally CHROME_BIN); make sure you understand and control that tool on your system. 4) Run the scripts in a sandbox or review them locally (they only read/write files and invoke local binaries) if you have concerns. 5) If you need tighter assurance, run smoke-test.mjs and inspect generated outputs before supplying real or sensitive content.
scripts/build-preview-gallery.mjs:28
Shell command execution detected (child_process).
scripts/chrome-utils.mjs:27
Shell command execution detected (child_process).
scripts/generate-theme-gallery.mjs:34
Shell command execution detected (child_process).
scripts/smoke-test.mjs:13
Shell command execution detected (child_process).
Patterns worth reviewing
These patterns may indicate risky behavior. Check the VirusTotal and OpenClaw results above for context-aware analysis before installing.

Like a lobster shell, security has layers — review code before you run it.

Runtime requirements

🎯 Clawdis
Binsnode
latestvk97915331qqpxareysnyzt1k1d83x5k5
183downloads
0stars
5versions
Updated 4w ago
v2.0.4
MIT-0

Web Slides

为用户生成高质量、单文件、可直接运行的 HTML 演示文稿。

核心定位:

  • 不依赖任何 API Key
  • 与具体模型、厂商、推理服务无关
  • 优先使用预制高端主题,而不是临时拼设计
  • 以效果好为第一优先级,同时兼顾低 token
  • 输出天然兼容桌面演示与移动端浏览

何时使用

  • 用户要做 PPT、Slides、演示稿、pitch deck、发布会页面、汇报稿
  • 用户要 HTML 版本的演示文稿,而不是 .pptx
  • 用户强调科技风、高级感、精美、商务、路演、发布会、数据报告
  • 用户要求生成结果开箱即用、无需接外部服务

工作方式

SKILL.md 只保留路由和生成规则。需要细节时按需读取:

  • 运行时说明:references/runtime.md
  • 主题总览:references/theme-catalog.md
  • 布局系统:references/layout-system.md
  • 质量标准:references/quality-bar.md
  • 输出流程:references/assembly-workflow.md
  • 内容结构:references/content-schema.md
  • 单主题细节:references/themes/*.md

本 skill 必须保持模型无关:

  • 不假设特定模型品牌、版本或厂商能力
  • 不依赖 OpenAI、Claude、GPT 等命名能力
  • 不把视觉效果建立在某个模型“更会设计”的前提上
  • 重点依赖预制主题、布局系统、内容结构和本地脚本

如果需要快速定位主题、场景、布局或直接拿推荐结果,优先运行:

  • node scripts/get-theme-bundle.mjs --list
  • node scripts/get-theme-bundle.mjs --theme cyber-grid
  • node scripts/get-theme-bundle.mjs --scene investor-pitch
  • node scripts/recommend-deck.mjs --scene investor-pitch --density medium
  • node scripts/scaffold-deck.mjs --scene ai-product-launch --title "你的标题"
  • node scripts/markdown-to-content.mjs --input examples/investor-pitch.md --output examples/investor-pitch.json --scene investor-pitch --mobile
  • node scripts/validate-content.mjs examples/investor-pitch.json
  • node scripts/qa-deck.mjs --content examples/investor-pitch.json
  • node scripts/smoke-test.mjs
  • node scripts/generate-slide-html.mjs --scene investor-pitch --title "Investor Pitch" --out dist/investor-pitch.html
  • node scripts/generate-slide-html.mjs --content examples/investor-pitch.json --out dist/investor-pitch.html
  • node scripts/render-preview.mjs --input dist/investor-pitch.html --output dist/investor-pitch.png
  • node scripts/build-preview-gallery.mjs

生成原则

  1. 先定场景,再定主题,再定布局,不要先写 HTML。
  2. 输出流程必须与具体模型无关,核心质量来自主题系统、布局系统和本地生成脚本。
  3. 优先从预制主题中选最合适的一套;不要混搭到破坏统一性。
  4. 优先使用布局原型承载内容;不要每页都自由发挥。
  5. 任何页面都要同时检查桌面显示和移动端缩放后的可读性。
  6. 如果用户没有给风格,默认走高级、正式、科技感或商务感,不走卡通和花哨路线。
  7. 如果用户给的是长文或提纲,优先整理为 references/content-schema.md 里的 JSON 结构,再生成 HTML。

最小决策流程

Step 1:识别任务类型

从用户输入中提取:

  • 场景:汇报 / 路演 / 产品发布 / 技术分享 / 白皮书 / 数据复盘 / 教学培训
  • 调性:科技 / 商务 / 极简 / 高端 / 发布会 / 学术 / 创意
  • 内容密度:轻 / 中 / 重
  • 输出规模:短 deck(6-10 页)/ 标准 deck(10-16 页)/ 长 deck(16-24 页)
  • 是否强调移动端浏览

Step 2:选择主题

优先先跑脚本拿最小推荐结果,再读 references/theme-catalog.md

如果用户要求很明确,再读对应单主题文件:

  • references/themes/cyber-grid.md
  • references/themes/executive-dark.md
  • references/themes/executive-light.md
  • references/themes/glass-future.md
  • references/themes/data-intelligence.md
  • references/themes/startup-pitch.md
  • references/themes/product-launch.md
  • references/themes/dev-summit.md
  • references/themes/luxury-black-gold.md
  • references/themes/editorial-serif.md
  • references/themes/neo-minimal.md
  • references/themes/creative-motion.md

Step 3:选择布局集

references/layout-system.md,从以下布局原型中选 6-10 个组合成整套 deck:

  • cover
  • agenda
  • section-break
  • insight
  • two-column
  • metrics
  • chart-focus
  • timeline
  • comparison
  • quote
  • closing

Step 4:按质量标准约束输出

references/quality-bar.md,确保:

  • 首屏有高级感
  • 页面层级清楚
  • 信息密度可控
  • 动效克制
  • 手机端不崩

Step 5:组装 HTML

references/assembly-workflow.md,或直接用生成器脚本先产出单文件 HTML 骨架。

输出要求:

  • 单个 HTML 文件
  • CSS 内嵌
  • JS 尽量精简
  • 对移动端友好
  • 不依赖任何 API Key

输出偏好

默认生成策略:

  • 渲染:自定义单文件 HTML 演示运行时
  • 主题:从 12 套旗舰主题中选择
  • 布局:优先复用固定布局原型
  • 动画:轻量、克制、不卡顿
  • 色彩:统一,不乱换
  • 文案:标题短、重点强、避免大段堆砌

不要这样做

  • 不要只换配色而没有版式差异
  • 不要把“科技风”理解成荧光蓝堆砌
  • 不要为了酷炫牺牲可读性
  • 不要在每页塞满 8 个以上 bullet
  • 不要把网页长文直接切成幻灯片
  • 不要为了省 token 放弃视觉完成度

成功标准

这项技能的目标不是“能生成 PPT”,而是生成后让用户觉得:

  • 一打开就高级
  • 可以直接拿去讲
  • 不像普通网页排版
  • 手机上看也精致
  • 比同类技能更稳定、更省 token、更不依赖外部能力

Comments

Loading comments...