Security audit
Security checks for vulnerabilities and agentic risk
This skill does what it says: it uses Baidu AI APIs to generate PowerPoint files, with no evidence of hidden persistence, local data harvesting, or destructive behavior.
Install only if you are comfortable sending PPT topics and any provided source content to Baidu's AI PPT service using your BAIDU_API_KEY. Avoid using it with confidential, regulated, or proprietary material unless your Baidu account and data-handling requirements allow that, and keep the API key scoped and protected.
This mismatch is security-relevant because the skill understates operational behavior: it depends on an external API key, retrieves remote data, and invokes another script via subprocess, which is broader than simple template selection. When a skill's declared purpose omits external access and subprocess behavior, users and agents may authorize it without understanding the true execution and data-exposure surface.
This mismatch is security-relevant because the skill understates operational behavior: it depends on an external API key, retrieves remote data, and invokes another script via subprocess, which is broader than simple template selection. When a skill's declared purpose omits external access and subprocess behavior, users and agents may authorize it without understanding the true execution and data-exposure surface.
This mismatch is security-relevant because the skill understates operational behavior: it depends on an external API key, retrieves remote data, and invokes another script via subprocess, which is broader than simple template selection. When a skill's declared purpose omits external access and subprocess behavior, users and agents may authorize it without understanding the true execution and data-exposure surface.
The skill declares capabilities requiring environment access, shell execution, and implicit network use via external API calls, but it does not define an explicit tool scope such as permissions or allowed-tools. This creates an overbroad execution surface where an agent may invoke more powerful tools than users expect, increasing the risk of secret exposure or unintended command execution.
The function sends user-supplied query content to Baidu's external AI PPT service to generate an outline. This is a real data exfiltration boundary: any sensitive prompt content provided to the skill is transmitted to a third party, and the code does not perform consent checks, redaction, or data classification before sending it.
outline = ""
chat_id = ""
query_id = ""
with requests.post(URL_PREFIX + "generate_outline", headers=headers, json=params, stream=True) as response:
for line in response.iter_lines():
line = line.decode('utf-8')
if line and line.startswith("data:"):
The PPT generation request transmits the full generated outline, title, query, and optional web_content to an external service, with web_content potentially containing large amounts of copied or sensitive source material. In this skill context, external transmission is core functionality, but it still creates a genuine confidentiality risk because user-provided content may be uploaded to a third-party provider without minimization or safeguards.
"web_content": web_content,
"enable_save_bos": True,
}
with requests.post(URL_PREFIX + "generate_ppt_by_outline", headers=headers, json=params, stream=True) as response:
if response.status_code != 200:
print(f"request failed, status code is {response.status_code}, error message is {response.text}")
return []
The skill hard-codes all theme categories in Chinese and later uses Chinese-only keyword matching and user-facing labels, which makes the behavior locale-specific by default. There is no visible opt-in, fallback language selection, or documentation that this is intentionally limited to Chinese users or content.
subprocess module calls execute external commands. Without careful input validation, this enables command injection.
]
start_time = int(time.time())
process = subprocess.Popen(
cmd,
stdout=subprocess.PIPE,
stderr=subprocess.PIPE,
No suspicious patterns detected.