image-deck: GPT Image 2 Slide Deck

PassAudited by VirusTotal on May 6, 2026.

Overview

Type: OpenClaw Skill Name: image-deck Version: 0.1.18 The image-deck skill is a specialized tool for generating image-based slide presentations using GPT Image 2 (Codex image_gen). The bundle consists of detailed instructions (SKILL.md), prompt templates (references/prompt-patterns.md), and metadata that define a structured workflow for content research, visual style consistency, and user approval gates. No evidence of data exfiltration, malicious execution, or harmful prompt injection was found; the skill operates entirely within its stated purpose of creating and assembling presentation decks.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Deck content and prompts may be processed by the built-in image-generation capability, and the output may be generated as images and assembled into presentation files.

Why it was flagged

The skill relies on an image-generation tool and may create multiple generated slide images and output files, which is expected for its purpose and gated by prompt review/approval instructions.

Skill content
create one approved master sample through Codex `image_gen` (GPT Image 2); generate each slide through Codex `image_gen` ... Then assemble those images into PPTX/PDF if requested.
Recommendation

Review the prompt package before approving generation, and avoid including confidential material unless you are comfortable using it with the image-generation workflow.

What this means

Installing from the referenced repository changes the local agent skills directory, so the installed files become part of the agent's available instructions.

Why it was flagged

The documented installation is manual and writes into the local Codex skills directory from a referenced repository; no automatic installer or code execution is shown.

Skill content
GitHub repository / Codex install URL: https://github.com/tseng71/skills ... mkdir -p ~/.codex/skills ... cp -R skills/image-deck ~/.codex/skills/image-deck
Recommendation

Verify the repository and installed files before copying them into `~/.codex/skills`, especially because the registry source/homepage metadata is limited.

What this means

Sensitive deck topics, source summaries, or prompt text could remain in local project files after the deck is generated.

Why it was flagged

The workflow may create local notes and prompt files containing the topic, audience/context, sources, takeaways, and slide prompts.

Skill content
Create `research-notes.md` before slide prompts when the user supplies only a topic ... Backup prompt files: prompts/01-slide.md ... prompts/<N>-slide.md
Recommendation

Use an appropriate workspace for confidential decks and delete or protect generated research/prompt files when they are no longer needed.