Prezentit

PassAudited by VirusTotal on May 12, 2026.

Overview

Type: OpenClaw Skill Name: prezentit Version: 1.0.11 The skill bundle is benign. The `_meta.json` contains standard metadata. The `SKILL.md` provides clear, detailed instructions for an AI agent to interact with the Prezentit API for generating presentations. Crucially, the skill's permissions are tightly scoped, allowing network access only to `https://prezentit.net/api/v1/*`, explicitly denying file system access (`fileSystem: none`), and only reading the `PREZENTIT_API_KEY` environment variable. There is no evidence of prompt injection attempts to subvert the agent, data exfiltration beyond the necessary API key, or any other malicious behavior.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Anyone installing the skill must provide a Prezentit API key, allowing the agent to perform Prezentit API actions on that account.

Why it was flagged

The skill requires a Prezentit API key and uses it as a bearer token. This is expected for the service, but it gives the agent delegated access to the user's Prezentit account and credits.

Skill content
requires:\n  config:\n    - PREZENTIT_API_KEY ... Auth Header: `Authorization: Bearer {PREZENTIT_API_KEY}`
Recommendation

Use a dedicated Prezentit API key if possible, revoke it if no longer needed, and ensure the registry metadata is updated to declare the required environment variable.

What this means

Generating slides can spend Prezentit credits, including paid credits if the account has them.

Why it was flagged

The documented generation request creates a presentation and consumes account credits. This is central to the skill's purpose and disclosed, but it is a credit-consuming account action.

Skill content
POST /api/v1/presentations/generate ... "creditsUsed": 75, "remainingCredits": 25
Recommendation

Before submitting a generation request, confirm the topic, slide count, theme, and estimated credit cost with the user.

What this means

Presentation topics, outlines, and contextual details may be sent to Prezentit for processing.

Why it was flagged

The skill sends user-provided presentation topics and optional details to the external Prezentit API. This is expected for generation, but users should recognize the external data flow.

Skill content
Base URL: `https://prezentit.net/api/v1` ... "topic": "User's topic here" ... `details` | string | No | Additional context about the presentation content.
Recommendation

Avoid including confidential or regulated information unless the user is comfortable with Prezentit's handling of that data.