Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

WPS PowerPoint

v1.0.0

支持创建、读取和编辑.pptx演示文稿文件,包括生成幻灯片、提取内容、修改版式与页面等操作。

0· 45·0 current·0 all-time
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
high confidence
Purpose & Capability
Name/description align with the requested capability (PPTX create/read/edit). The skill requires no credentials or installs, which is proportionate — however the SKILL.md references additional internal docs (skills/pptx/read_ppt.md, gen_ppt.md, pptxedit.md) that are not present in the package, indicating incomplete or inconsistent packaging.
!
Instruction Scope
Runtime instructions tell the agent to use a tool named jupyter_cell_exec to read internal guide files and reference platform paths (<OUTPUT_ROOT>). Those helper files are not present, and jupyter_cell_exec is not declared or described — the instructions therefore depend on unspecified tools/files and grant the agent discretionary actions (reading/writing files) without clear boundaries.
Install Mechanism
No install spec and no code files (instruction-only) — lowest install risk. Nothing will be downloaded or written by an install step.
Credentials
The skill requests no environment variables or credentials, which is appropriate for the stated PPTX tasks. However, instructions reference platform-specific paths and tools (e.g., <OUTPUT_ROOT>, jupyter_cell_exec) that could implicitly access files — the lack of explicit declarations means the agent's file and tool access is unclear.
Persistence & Privilege
always is false and there are no install hooks; autonomous invocation is allowed by platform default (disable-model-invocation=false). The skill does not request persistent privileges or modify other skills, so persistence/privilege level is ordinary.
What to consider before installing
This skill appears to do what it claims (editing/creating .pptx) but its instructions reference missing helper files and an unspecified tool (jupyter_cell_exec) and use platform paths like <OUTPUT_ROOT>. Before installing or enabling it, ask the publisher or maintainer to: 1) provide the referenced files (skills/pptx/read_ppt.md, gen_ppt.md, pptxedit.md) so you can inspect their exact commands and file accesses; 2) explain what jupyter_cell_exec is, whether it runs arbitrary code or has filesystem/network access, and whether it is already trusted in your environment; 3) confirm where <OUTPUT_ROOT> maps to and how uploaded/created .pptx files are stored/transmitted (are files ever uploaded to external servers?); and 4) if possible, test the skill in a sandboxed environment with non-sensitive PPTX files. If the publisher cannot supply the missing docs or the tool details, consider the skill untrusted—the missing material is an unresolved incoherence that could hide undesired behavior.

Like a lobster shell, security has layers — review code before you run it.

latestvk97a07shy9n4gf14tewy7bj5eh852msqpptxvk97a07shy9n4gf14tewy7bj5eh852msqpresentationvk97a07shy9n4gf14tewy7bj5eh852msqslidesvk97a07shy9n4gf14tewy7bj5eh852msq
45downloads
0stars
1versions
Updated 4d ago
v1.0.0
MIT-0

PPTX 技能

Overview

本技能支持 PPT 相关的两类核心操作:读取现有 .pptx 文件并提取其结构化内容,以及创建全新的演示文稿。

Quick Start

在执行任何 PPTX 任务前,先根据用户意图判断任务类型:

用户意图任务类型对应流程
打开 / 解析 / 提取现有 PPT 内容读取 PPTTask 1
根据内容、搜索到的资料 新建 / 生成 / 制作演示文稿创建 PPTTask 2
修改PPT内容、增删PPT页面、从用户上传的ppt文件创建ppt、根据模板创建ppt编辑PPTTask 3

Task 1:读取 PPT

适用场景: 用户提供现有 .pptx 文件,需要提取文字、结构或布局信息,回答用户问题。

读取流程

详见 skills/pptx/read_ppt.md


Task 2:创建 PPT

适用场景: 从零构建基于 HTML 的演示文稿(PPT)。关键词:'做PPT'、'做演示'、'做幻灯片'、'做汇报'、'制作演示文稿'、'make slides'、'create presentation'

使用 jupyter_cell_exec 工具读取 skills/pptx/gen_ppt.md 了解创建 PPT 的详细指南。


Task 3:编辑PPT

适用场景: 用户提供现有 .pptx 文件,需要对其进行内容修改、增删页面、调整顺序等编辑操作。 使用jupyter_cell_exec 读取 skills/pptx/pptxedit.md 了解pptx编辑的详细指南

第 1 步:读取并分析现有 PPT

第 2 步:执行编辑操作 参考编辑操作指南中列出的编辑操作进行编辑。

第 3 步:保存输出 将编辑好的pptx文件保存到<OUTPUT_ROOT>/<文档名>.pptx


Comments

Loading comments...