Skills/ClawHub/double6-ppt-cli

double6-ppt-cli@0.4.2

CAUTION· static only

Publisher claims: "基于 ppt-master 与 iOfficeAI/OfficeCLI 两个开源项目，生成、套用模板、读取、检查和闭环修复原生 PPTX；“可编辑”重点指保留原生对象与稳定身份，方便 Agent 多轮定位、修改和复查。适用于从 Markdown、文本、结构化材料与本地授权图片制作演示文稿，复用常规 PPTX 模板，或质检和受限修复已有 PPTX；不负责 PDF/DOCX 内容解析、联网搜图、图片式 PPT、HTML slides、TTS 或视频。" Observed in sandbox: static analysis only — behavior not yet observed.

Registry ClawHubPublisher double6-ai · publishing for 103 daysInstalls 661Last detonated 4d ago
What would fix thisWatchDispute verdict

Coverage

Static only; nothing was run yet.

The label rests on the code, the instruction files and the publisher. The honeypot run replaces this verdict when it completes.

Is [email protected] safe to install?

KillerSkills analysed it statically (a sandbox run is pending) on 2026-11-07 and scored it 58/100 (Caution). It is not known to be malicious, but it has behaviour or code a security policy should decide on before install. Notable findings: Access to sensitive file paths; Access to sensitive file paths; Access to sensitive file paths. Summary: static analysis only — behavior not yet observed.

Behavior trace

Queued for honeypot run · static analysis only
t+CategoryObserved action

This version has not been detonated yet. The score above counts behavior as unknown (50/100), so it cannot read Verified until the honeypot run completes and replaces this verdict.

Static findings

HIGH
Access to sensitive file pathsvendor/ppt-master-core/skills/ppt-master/scripts/config.py:59 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files"""Return the supported .env lookup order."""Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsvendor/ppt-master-core/skills/ppt-master/scripts/config.py:61 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesPath.cwd() / '.env',Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsvendor/ppt-master-core/skills/ppt-master/scripts/config.py:55 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesUSER_ENV_FILE = USER_CONFIG_DIR / '.env'Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
Python subprocess execution detectedscripts/double6_ppt_cli/powerpoint.py:168 · Python subprocess execution detectedproc = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/double6_ppt_cli/officecli.py:47 · Python subprocess execution detectedproc = subprocess.run(command, capture_output=True, timeout=timeout or self.timeout)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/double6_ppt_cli/doctor.py:95 · Python subprocess execution detectedproc = subprocess.run([str(binary), "--version"], capture_output=True, text=True, timeout=15)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/double6_ppt_cli/bootstrap.py:30 · Python subprocess execution detectedproc = subprocess.run([sys.executable, "-m", "venv", str(venv)], capture_output=True, text=True, timeout=180)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
File type combined with upload actionscripts/double6_ppt_cli/inspector.py:304 · File type combined with upload action — agent may exfiltrate local data fileswrite_json(run / "artifacts" / "current_pptx_profile.json", output_profile)Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
Python subprocess execution detectedscripts/double6_ppt_cli/compiler.py:90 · Python subprocess execution detectedproc = subprocess.run(command, capture_output=True, text=True, timeout=600)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/double6_ppt_cli/bootstrap.py:44 · Python subprocess execution detectedproc = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
HIGH
Access to sensitive file pathsvendor/ppt-master-core/skills/ppt-master/scripts/config.py:62 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesPROJECT_ROOT / '.env',Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
Python subprocess execution detectedscripts/double6_ppt_cli/doctor.py:197 · Python subprocess execution detectedproc = subprocess.run(command + ["--version"], capture_output=True, text=True, timeout=20)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/double6_ppt_cli/compiler.py:69 · Python subprocess execution detectedquality = subprocess.run(quality_command, capture_output=True, text=True, timeout=300)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/double6_ppt_cli/bootstrap.py:35 · Python subprocess execution detectedproc = subprocess.run([str(venv_python), "-m", "pip", "install", "-r", str(requirements)], capture_output=True, text=True, timeout=900)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
HIGH
Access to sensitive file pathsvendor/ppt-master-core/skills/ppt-master/scripts/config.py:63 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesREPO_ROOT / '.env',Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
Python subprocess execution detectedvendor/ppt-master-core/skills/ppt-master/scripts/template_fill_pptx/validator.py:355 · Python subprocess execution detectedsubprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedvendor/ppt-master-core/skills/ppt-master/scripts/native_enhance_pptx_core.py:1715 · Python subprocess execution detectedresult = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
File type combined with upload actionvendor/ppt-master-core/skills/ppt-master/scripts/template_fill_pptx.py:10 · File type combined with upload action — agent may exfiltrate local data filespython3 scripts/template_fill_pptx.py apply <deck.pptx> fill_plan.json -o output.pptxFix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
Python subprocess execution detectedscripts/double6_ppt_cli/verifier.py:179 · Python subprocess execution detectedproc = subprocess.run([pdftoppm, "-png", "-r", "96", str(pdf), str(prefix)], capture_output=True, text=True, timeout=300)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/double6_ppt_cli/powerpoint.py:227 · Python subprocess execution detectedproc = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/double6_ppt_cli/selftest.py:15 · Python subprocess execution detectedproc = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedvendor/ppt-master-core/skills/ppt-master/scripts/svg_to_pptx/pptx_package/builder.py:3975 · Python subprocess execution detectedresult = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/double6_ppt_cli/verifier.py:312 · Python subprocess execution detectedproc = subprocess.run(command, capture_output=True, text=True, timeout=300)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
File permission modification commandvendor/ppt-master-core/skills/ppt-master/scripts/svg_to_pptx/pptx_package/builder.py:3966 · File permission modification command — agent changes file ownership/permissionswarnings.append(f"chmod skipped for {output_path}: {exc}")Fix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05
MEDIUM
Python subprocess execution detectedvendor/ppt-master-core/skills/ppt-master/scripts/project_management/cli.py:384 · Python subprocess execution detectedresult = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/double6_ppt_cli/verifier.py:171 · Python subprocess execution detectedproc = subprocess.run(command, capture_output=True, text=True, timeout=300)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedvendor/ppt-master-core/skills/ppt-master/scripts/svg_to_pptx/pptx_package/narration.py:140 · Python subprocess execution detectedresult = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05

Cost to the agent

Instructions loaded
≈3,374 tok
2 files · 199 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.

What would make this Verified

22 points to 80 · weights: behavior 45%, static 25%, prompt 15%, publisher 15%
  1. Unclaimed publisher≈ +8 on the totalClaim double6-ai: a verified publisher gets +50 on publisher trust. It is free and usually instant with GitHub sign-in.
  2. Access to sensitive file paths≈ +4 on the totalStop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
  3. Python subprocess execution detected≈ +2 on the totalBuild commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
  4. File type combined with upload action≈ +2 on the totalRemove the call, or declare the host in frontmatter and explain in the README what is sent and why.
  5. File permission modification command≈ +2 on the totalRequest the narrowest permission that works; replace wildcards with the exact paths or hosts.
Publish a new version to ClawHub, then queue it here. Not your skill? Claim the handle to get verdict changes by email.Claim double6-aiPropose a patch to the maintainer