by 安全扫描
OpenClaw
安全
high confidenceThe skill's code, runtime instructions, and requested environment variables are consistent with its stated purpose (uploading content and calling a Presentation Intelligence PPT-generation API).
评估建议
This skill appears to do what it says: it sends text and optionally a local file to the PI service URL you provide and polls for a generated PPT. Before installing or running: 1) Verify PIPPT_BASE_URL points to the legitimate PI service (https://www.pi.inc or another trusted endpoint). 2) Do not upload sensitive or confidential documents unless you trust the remote service and policy. 3) Ensure the runtime has the Python 'requests' package (pip install requests) since the script requires it. 4) ...详细分析 ▾
✓ 用途与能力
Name/description (generate PPTs via PI) match the required binaries (python3), the required env vars (PIPPT_BASE_URL, PIPPT_APP_ID, PIPPT_APP_SECRET), and the included script which implements upload, create, and status polling against the PI API.
ℹ 指令范围
SKILL.md and the script remain within the stated purpose: they only read the three PI-related env vars and an optional user-specified file to upload, then call endpoints derived from PIPPT_BASE_URL. Note: the skill will upload any local file path you pass to the remote service — do not upload sensitive documents unless you trust the target endpoint.
ℹ 安装机制
There is no install spec (instruction-only style), which is low-risk. However the script imports the Python 'requests' package but the skill only declares 'python3' as a required binary; the SKILL.md does not instruct installing Python dependencies (e.g., pip install requests). This is an operational omission, not evidence of malicious behavior.
✓ 凭证需求
Required environment variables (base URL, app id, app secret) are exactly what a remote API client would need. No unrelated credentials or system config paths are requested.
✓ 持久化与权限
The skill does not request always-on presence and does not modify other skills or system-wide settings. It runs on demand and only uses its own environment variables.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.92026/3/11
- No changes detected in this version. - Functionality, usage instructions, and requirements remain the same.
● 无害
安装命令
点击复制官方npx clawhub@latest install pi-ppt
镜像加速npx clawhub@latest install pi-ppt --registry https://cn.longxiaskill.com镜像同步中
技能文档
Functionality
- Generate PPTs using the PI (Presentation Intelligence) API.
Setup
- API Key: Ensure the PIPPT_BASE_URL, PIPPT_APP_ID and PIPPT_APP_SECRET environment variables are set with your valid API key. You can obtain API key from the PI website: https://www.pi.inc/ .
- Environment: The API key should be available in the runtime environment.
Generate a PPT
Run the following script:PIPPT_BASE_URL=xxx PIPPT_APP_ID=xxx PIPPT_APP_SECRET=xxx python3 scripts/generate_pi_ppt.py --content --language --cards --file
Complete command examples:
Generate from an uploaded document (slide count is determined by content, do not pass --cards):
PIPPT_BASE_URL=xxx PIPPT_APP_ID=xxx PIPPT_APP_SECRET=xxx python3 scripts/generate_pi_ppt.py \
--content "Generate a well-structured business report PPT based on the attached document" \
--language zh \
--file "/Users/YourName/Documents/quarterly_review.docx"
Generate from a one-line prompt / topic (you can specify slide count):
PIPPT_BASE_URL=xxx PIPPT_APP_ID=xxx PIPPT_APP_SECRET=xxx python3 scripts/generate_pi_ppt.py \
--content "Create a PPT introducing Chinese GPU vendors in a formal business style" \
--language zh \
--cards 10
Notes
- Generating one PPT usually takes about 3-6 minutes. Please remind users to be patient.