corespeed-slide
v1.0.0Generate professional PowerPoint (.pptx) presentations using JSX/TSX with Deno. Supports slides, text, shapes, tables, charts (bar, line, pie, donut), images...
⭐ 0· 122·1 current·1 all-time
byZypher Agent@zypher-agent
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name/description map to what the code and instructions do: a Deno-based generator that imports @pixel/pptx and converts a user-provided .tsx 'deck' into a .pptx. Requiring the deno binary is proportional.
Instruction Scope
The runtime imports and executes a user-supplied .tsx via dynamic import (import(`file://${inputPath}`)). That is necessary for this skill but means arbitrary code in the slide file will run under the permissions you grant Deno. The SKILL.md and generate.ts expect --allow-read and --allow-write; they do not explicitly request or document network permissions (--allow-net), but network access may be required to fetch remote modules or resolve the '@pixel/pptx' import mapping if not cached. You should only run untrusted slide files in a sandbox and be explicit about Deno permissions.
Install Mechanism
SKILL.md suggests installing Deno via piping the upstream install script (curl -fsSL https://deno.land/install.sh | sh). Although the URL is the official deno.land domain, piping remote scripts to sh is a high-risk pattern. The skill has no other install spec; installing Deno is logically required but the installation command is an elevated-risk action and should be reviewed before running.
Credentials
No environment variables or credentials are requested. The skill does not ask for unrelated secrets or access to other configs.
Persistence & Privilege
always is false and the skill does not request persistent presence or attempt to modify other skills or system-wide settings. It runs as an on-demand generator.
Assessment
This skill appears to be what it claims: a Deno-based PPTX generator using @pixel/pptx. Before installing or running it, consider the following:
- The generator dynamically imports and executes the user-provided .tsx file. That means any code in that file will run with the Deno permissions you grant. Do not run slide files from untrusted sources on a machine with sensitive data or access.
- SKILL.md suggests installing Deno by piping the official install script to sh (curl | sh). Even though the URL is the official deno.land domain, piping scripts to a shell is inherently risky — review the script first or install Deno via your platform's package manager or from a verified release.
- The example command grants --allow-read and --allow-write; depending on your environment you may also need --allow-net to fetch remote dependencies. Grant the minimal permissions necessary, and prefer running the generator in a sandbox or ephemeral environment.
- Review any slide files you run (or run them in an isolated container/VM). If you need to run untrusted slide sources, consider pre-rendering in an isolated runner or require contributors to rely only on local/cached dependencies.
If you want higher confidence, ask the author for explicit guidance on required Deno permissions (including whether --allow-net is needed) and a signed release/install method for Deno and the @pixel/pptx dependency.Like a lobster shell, security has layers — review code before you run it.
latestvk970gwfn3ze11f0msb0xq321bd838gw4
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
📊 Clawdis
Binsdeno
