Tech Report PPT Generator
v1.2.1AI 驱动的技术洞察 PPT 生成器
⭐ 0· 67·0 current·0 all-time
byDeepWater@xieyuantao7
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
OpenClaw
Benign
high confidencePurpose & Capability
Skill name/description (PPT insight generator) align with the included scripts: search/collect, extract insights, generate content, optimize, and render PPTX. The provided Node/Python scripts and templates match the declared purpose. Small note: some files use a hard-coded Windows-style base path (D:/techinsight/...) which may be surprising on non-Windows hosts but is not malicious.
Instruction Scope
SKILL.md instructs the agent to perform web searches using other skills (browser_use/news/research), to extract page text, download PDFs, call an LLM for analysis, and run local Node scripts that read/write session directories. These actions are coherent with the goal but do grant the skill the ability to fetch arbitrary URLs and write files to disk — expected, but you should be cautious about allowing it network access to internal services or untrusted web content (downloaded PDFs/HTML).
Install Mechanism
No install spec — instruction-only plus included code files. No external installers or downloads are performed by an install phase. Runtime does require pptxgenjs if you run the generator locally (README notes npm install).
Credentials
The skill declares no required environment variables, credentials, or config paths. The code does perform HTTP(S) requests and filesystem access, but it does not request secrets or unrelated credentials, which is proportionate to its stated function.
Persistence & Privilege
always is false and the skill does not request permanent platform-level privileges or modify other skills. It writes files under a session directory it manages (normal for this use case).
Assessment
This skill appears internally consistent with its goal of collecting web content, extracting insights, and generating PPTX files. Things to consider before installing or running it:
- Run in a sandboxed environment (or VM/container) because the scripts download arbitrary URLs and save files to disk; malicious or malformed PDFs/HTML could be harmful.
- The agent is instructed to use browser/search skills and to fetch external links — avoid granting it access to internal-only networks or sensitive endpoints.
- The code writes to session directories (example uses D:/techinsight/...); check and adjust file paths/permissions so it doesn't overwrite important data.
- If you plan to execute scripts locally, install prerequisites (pptxgenjs, Node.js, and Python if v2 script used) and review the scripts (they're present) to confirm behavior.
- If you want stronger guarantees, audit file_utils/logger/config modules (they control filesystem operations) before running, and consider limiting network egress or using a captive proxy to monitor downloads.Like a lobster shell, security has layers — review code before you run it.
latestvk97ak8qpcs6swrscz3t7kb3ms184btsd
License
MIT-0
Free to use, modify, and redistribute. No attribution required.