📦 PPT Presenter — 演讲级PPT生成器
v1.0.0一键生成专业HTML演示文稿,自动配图并输出逐字演讲稿,演讲者视图助您自信登台。
0· 400·1 当前·1 累计
下载技能包
最后更新
2026/3/11
安全扫描
OpenClaw
可疑
high confidenceNULL
评估建议
This skill is largely coherent with its stated purpose, but review these items before installing:
- Expect to provide a Gemini API key (GEMINI_API_KEY) even though the metadata doesn't declare it. Ask the author to update the metadata to list this required credential.
- The included script sends the API key in the URL query (?key=...), which can be logged by intermediaries. If you must use this skill, consider passing the key via the --api-key argument only at runtime or modify the script to us...详细分析 ▾
ℹ 用途与能力
Functionality (outline → per-slide content → Gemini image generation → reveal.js assembly) matches the name and description. However, metadata declares no required environment variables despite the SKILL.md and included script depending on a Gemini API key (GEMINI_API_KEY) — an incoherence between claimed requirements and actual capability.
✓ 指令范围
SKILL.md instructions stay within the stated purpose: generating slide content, producing one image per slide via Gemini, and assembling an HTML reveal.js presentation. The instructions ask the agent to read user-supplied markdown/text when provided (expected). One problem: SKILL.md points to a TOOLS.md 'Gemini Image Generation' section for finding the API key, but no TOOLS.md is included in the bundle.
✓ 安装机制
No install spec is provided (instruction-only install), which is low risk. There is one included script (scripts/generate_slide_images.py) and an HTML template; both are readable and not obfuscated. Nothing is downloaded from arbitrary URLs during install.
⚠ 凭证需求
The skill implicitly requires a Gemini API key (GEMINI_API_KEY) to generate images, but the registry metadata lists no required env vars or primary credential — this is inconsistent and could cause surprise when the key is requested. The included Python script also places the API key in the request URL (?key=...), which is less secure (can be logged by proxies or servers). No other unrelated credentials are requested.
✓ 持久化与权限
The skill does not request permanent/always-on presence and uses default autonomous invocation. It does not modify other skill or agent configs and asks for no system-wide paths or elevated privileges.
安全有层次,运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/11
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install ai-ppt-presenter
镜像加速npx clawhub@latest install ai-ppt-presenter --registry https://cn.longxiaskill.com