Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

GLM-V-PDF-to-PPT

v1.0.0

Convert a PDF (research paper, report, or any document) into a polished multi-slide HTML presentation with a structured outline JSON and summary markdown. Tr...

0· 152·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description, included Python scripts (pdf_to_images.py, crop.py, generate_slide.py), and required binaries (python) are coherent: they implement PDF page rasterization, cropping, and slide file generation. No unrelated credentials, tools, or config paths are requested.
Instruction Scope
Runtime instructions operate on local files (downloaded PDF via curl or local path), read page images, produce outline.json, crops, slide HTML, and summary.md in a workspace subdirectory. They explicitly instruct delegating cropping to a fresh subagent and to use the platform Write tool to save outline.json. This is consistent with the task, but you should be aware that the workflow asks the agent to read/hold the entire document images in memory/context and to spawn a subagent for cropping — review subagent privileges and outputs before granting them access.
Install Mechanism
No opaque install spec; the SKILL.md suggests installing standard Python packages (pymupdf, pillow) via pip. No downloads from untrusted URLs or archive extraction are present in the manifest or scripts.
Credentials
The skill requests no environment variables, tokens, or credentials. The only external network operation is an optional curl download of a user-supplied PDF URL, which is appropriate for the described feature.
Persistence & Privilege
Skill does not request always:true, does not modify other skills or system settings, and only writes output into the declared workspace output directory. Autonomous invocation is allowed (platform default) but not excessive here.
Assessment
This skill appears to do exactly what it claims: convert a PDF into local slide HTML + crops and an outline. Before installing: (1) ensure you trust the PDF sources you pass (the skill will download user-provided URLs with curl), (2) verify you are comfortable installing PyMuPDF and Pillow into the environment, (3) note the workflow spawns a fresh subagent for cropping — confirm that subagent is permitted only local file access and won't send images elsewhere, and (4) review the included scripts yourself or run them in an isolated environment if you handle sensitive documents.

Like a lobster shell, security has layers — review code before you run it.

latestvk97esqcjjzfgn60ndxxzns4hfs83vn5b

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Runtime requirements

📑 Clawdis
Binspython

Comments