Ppt Generator 1
v1.0.0将用户讲稿一键生成乔布斯风极简科技感竖屏HTML演示稿。当用户需要生成PPT、演示文稿、Slides、幻灯片,或要求科技风/极简风/乔布斯风格的演示时触发此技能。输出为单个可直接运行的HTML文件。
⭐ 0· 1.4k·7 current·7 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
Name, description, and provided files (template.html, design spec, slide-types) align with the stated goal of converting a user script into a single HTML minimal/tech-style vertical presentation.
Instruction Scope
SKILL.md steps are narrowly scoped to reading user text, creating condensed Markdown, planning slides, and producing HTML. However the generated template loads external JS/CSS/fonts via third‑party CDNs; SKILL.md does not call these out or warn that opening the output will cause network requests (possible privacy/tracking/execution surface). Also SKILL.md mentions Vue3 (CDN) as part of the tech stack but the provided template does not include a Vue3 script tag — a small inconsistency.
Install Mechanism
Instruction-only skill with no install steps or binaries to fetch; nothing would be written to disk by the skill itself during install.
Credentials
No environment variables, credentials, or config paths are requested — consistent and minimal for the stated purpose.
Persistence & Privilege
always is false and the skill does not request persistent/system privileges or modify other skills. Autonomous invocation is allowed by default (platform standard) but not combined with elevated privileges here.
What to consider before installing
This skill appears to do what it says (generate a single HTML slide deck), but review the template before use: it includes remote CDN/script and font URLs (e.g., tailwind CDN and fonts.loli.net / bytecdntp host). When the output HTML is opened, those third-party hosts will be contacted and remote JavaScript may execute — this can leak the viewer's IP or page content and change runtime behavior if a CDN is compromised. Recommendations before installing/using:
- Inspect assets/template.html and references/* for all external URLs. Consider replacing remote scripts/fonts with local/static copies if you are handling sensitive content.
- If you must use CDNs, prefer well-known, integrity-checked resources and add Subresource Integrity (SRI) where possible; avoid unknown personal/CDN mirror domains.
- If you need fully offline/safest output, modify the template to inline CSS and avoid remote <script> includes (or bundle known-safe runtime code).
- Note the minor mismatch: SKILL.md lists Vue3 as part of the stack but the template does not include a Vue3 CDN tag — verify intended behavior if interactive features are expected.
If you are comfortable with these external network requests (or you plan to sanitize the template), the skill is functionally coherent. If you cannot accept any third-party network calls or remote JS execution, treat this skill as unsafe until its template is modified to be self-contained.Like a lobster shell, security has layers — review code before you run it.
latestvk9723yqyvhkw6sa76h94efr7ms811k7f
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
