📦 PPT Presenter — 带逐字稿的演讲级PPT生成器 — PPT Presenter——带逐字稿的演讲级PPT生成器
v1.2.0使用 AI 生成的白板图像和面向混合受众的详细演讲稿，创建专业的 reveal.js HTML 演示文稿，并支持完整流水线……
0· 313·1 当前·1 累计
by 下载技能包
最后更新
2026/3/11
安全扫描
OpenClaw
可疑
medium confidenceThe skill mostly does what it says (build reveal.js slides and call Gemini image API), but the package metadata omits needed runtime requirements (Gemini API key and python3) and the instructions will send user content to an external image-generation endpoint — these mismatches and data-exfiltration implications deserve caution.
评估建议
This skill appears to implement the advertised functionality, but there are important caveats to consider before installing or running it:
- It requires an API key for Google's Gemini image endpoints (GEMINI_API_KEY) to generate slide images, but that credential is not declared in the skill metadata — you will need to supply it manually (via --api-key or GEMINI_API_KEY). Treat that key like any sensitive API key: only provide it if you trust the skill and the operator. The script will send your...详细分析 ▾
ℹ 用途与能力
The skill's name/description match its files and instructions: it generates reveal.js HTML, per-slide speaker scripts, and one AI image per slide. However the metadata does not declare the real runtime dependencies the skill uses: the SKILL.md and scripts/generate_slide_images.py require a Gemini API key (GEMINI_API_KEY) and execution via python3. The omission of these required resources from the declared metadata is an inconsistency.
⚠ 指令范围
SKILL.md instructs the agent to read user-provided markdown/text to build slides and to call the Gemini image-generation API with prompts that may include user content. The script and docs reference checking a TOOLS.md for API keys (TOOLS.md isn't included), and the run commands rely on an API key passed via --api-key or GEMINI_API_KEY. The instructions therefore cause user content and prompts to be transmitted to an external Google generative-language endpoint — expected for image gen but worth flagging since the metadata didn't declare that network interaction or required credentials.
✓ 安装机制
There is no install spec (instruction-only + a small helper script). That is low-risk from an installation perspective: nothing is downloaded or installed automatically by the skill bundle itself. The included Python script is plain and readable (no obfuscated code or hidden endpoints).
⚠ 凭证需求
The skill needs an API key (GEMINI_API_KEY) to generate images, but the registry metadata lists no required env vars or primary credential. That mismatch is a substantive omission. Also, providing the Gemini API key will allow the skill to send prompts and any included user content to Google's generative API — this is proportionate to the stated purpose (image generation) but it is sensitive and should have been declared explicitly in metadata so the user knows what credentials they'll need to supply.
✓ 持久化与权限
The skill does not request always:true or any elevated persistence. It does not modify other skills or system-wide settings; it simply provides instructions and a standalone script and an HTML template.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.2.02026/3/11
Clean publish: removed non-skill files (promo images, marketing copy). Skill only contains SKILL.md, reveal template, and image generation script.
● 无害
安装命令
点击复制官方npx clawhub@latest install ppt-presenter
镜像加速npx clawhub@latest install ppt-presenter --registry https://cn.longxiaskill.com