Sum2Slides Pro
v1.5.0基于多代理协同，提供深度语义理解、高效批量生成和7种专业布局的企业级PPT自动制作系统。
⭐ 0· 127·0 current·0 all-time
byWei Wu@wwumit
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The name/description (text-to-PPTX conversion) matches the code and SKILL.md: modules parse text/Markdown, build slide models and export .pptx via python-pptx. Required dependencies listed (python-pptx, markdown, pydantic, click, pyyaml) are plausible. Minor functional inconsistency: Template.validate_path requires a non-empty path, but config/default.yaml contains empty strings for template.path — this is a likely bug but not a security issue.
Instruction Scope
SKILL.md only instructs local installation, CLI and Python API usage, and reading/writing local config (~/.config/sum2slides/config.yaml) and files. The runtime instructions do not ask the agent to read unrelated system files, export credentials, or send data to third-party endpoints. The SKILL.md suggests cloning from GitHub and pip installing; that is expected for a Python project. Note: Registry metadata lists 'Source: unknown' and 'Homepage: none' while SKILL.md refers to a GitHub repo (https://github.com/openclaw/sum2slides.git) — verify the repository before trusting it.
Install Mechanism
There is no formal install spec in the registry, but the package includes scripts/setup.py that will call pip to install dependencies and install the package (pip install -e .). This uses PyPI and GitHub references (normal). No downloads from obscure hosts, URL shorteners, or IPs were found in the provided files. Because setup.py runs subprocess pip installs, run it in a controlled environment (virtualenv/CI) rather than system-wide if you don't trust the source.
Credentials
The skill declares no required environment variables or credentials. SKILL.md suggests optional environment variables for defaults (SUM2SLIDES_TEMPLATE, SUM2SLIDES_OUTPUT_DIR, SUM2SLIDES_LOG_LEVEL) which are proportionate to the tool's purpose. The code does not request unrelated secrets or external service credentials.
Persistence & Privilege
Flags indicate no always:true and autonomous invocation is allowed (platform default). The included setup script writes a config file to the user's home (~/.config/sum2slides) and may create example files — this is reasonable for a local tool. The skill does not attempt to modify other skills or system-wide agent settings.
Assessment
This package appears to do what it says: local text/Markdown → PPTX conversion using python-pptx and common Python libs. Before installing: 1) Verify the repository referenced in SKILL.md (github.com/openclaw/sum2slides) is the legitimate source you expect — registry metadata lists source/homepage as unknown. 2) Inspect or run the included setup.py in a virtual environment (venv) to contain any pip installs and filesystem writes; setup.py will pip-install dependencies and copy a default config to ~/.config/sum2slides. 3) Be aware of minor functional inconsistencies (e.g., template.path empty in default config vs Template.validate_path requiring non-empty path) — these are likely bugs, not malicious behavior. 4) If you plan to run automated tests or the setup script, do so in an isolated environment and review any network activity (pip will access PyPI/GitHub). If you need higher assurance, ask the maintainer for a homepage/repo link, signed releases, or a package published on a trusted index before installing system-wide.Like a lobster shell, security has layers — review code before you run it.
latestvk977rwjja6k638bw6kgtk3ac6h83bve1
License
MIT-0
Free to use, modify, and redistribute. No attribution required.