Skills/ClawHub/gpt-image2-ppt-skills

gpt-image2-ppt-skills@1.0.0

CAUTION· install only

Publisher claims: "Generate visually striking PPT slides via OpenAI's gpt-image-2 -- use any style in styles/<id>.md or mimic a user-supplied .pptx template; outputs high-res slide PNGs and a 16:9 .pptx. Use when the user asks to make a presentation, slides, deck, pitch deck, investor PPT, magazine-style PPT, or 做一份 PPT / 生成幻灯片 / 用 gpt-image 生成 PPT / 按这个模板生成 PPT." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher huanyuqwq · publishing for 59 daysInstalls 307Last detonated 8d ago
What would fix thisWatchDispute verdict

Coverage

Nothing executable in the bundle ran; the trace covers the install step only.
Tested
every file read, file written and host contacted by what ran
Not tested
use of the skill by an agent

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-07 and scored it 77/100 (Caution). It is not known to be malicious, but it has behaviour or code a security policy should decide on before install. Notable findings: Privileged sudo command; Privileged sudo command; Access to sensitive file paths. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
0.1sprocessno install scripts to re-run

Static findings

HIGH
Privileged sudo commandSKILL.md:133 · Privileged sudo command — agent may execute with elevated privileges| Linux (Arch) | `sudo pacman -S --noconfirm libreoffice-fresh` |Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commandSKILL.md:132 · Privileged sudo command — agent may execute with elevated privileges| Linux (Fedora/RHEL) | `sudo dnf install -y libreoffice` |Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Access to sensitive file pathsSKILL.md:182 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files不要把本 skill 的密钥写进调用者业务项目根目录的 `.env`，也不要为了出图去读取用户项目里的通用 `.env`。环境变量建议按 agent 框架的标准方式注入：Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Privileged sudo commandSKILL.md:131 · Privileged sudo command — agent may execute with elevated privileges| Linux (Debian/Ubuntu) | `sudo apt-get install -y libreoffice` |Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Access to sensitive file pathsAGENTS.md:27 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files- 脚本**不会**向上递归读取调用者项目目录的 `.env`，避免误吃业务项目密钥Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsAGENTS.md:25 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files- 默认后端 `openai`，需通过 agent 配置 / 系统环境变量注入 `OPENAI_API_KEY`；standalone CLI 可用 `$GPT_IMAGE2_PPT_ENV` 或 skill 安装目录 `.env` 作为 fallback，**不要**写进调用者业务项目根目录 `.env`Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
LOW
Collapsed <details> block carrying instructionsREADME.md:187 · Collapsed <details> block carrying instructions · informational: not an instruction file · informational: not an instruction file<summary><strong>API 直连与密钥配置</strong></summary> 如果你走 API 直连模式，需要给 agent 注入环境变量。推荐使用当前 agent 框架的标准配置，而不是把密钥写进业务项目根目录 `.env`： - Claude Code：用户级 `~/.claude/settingFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01
HIGH
Privileged sudo commandscripts/render_template.py:548 · Privileged sudo command — agent may execute with elevated privileges" - pip install pdf2image && sudo apt-get install -y poppler-utils"Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Access to sensitive file pathsinstall_as_skill.sh:125 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesprint_info "已备份现有 .env 到 /tmp/gpt-image2-ppt.env.bak"Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsinstall_as_skill.sh:122 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files# 备份用户的 .envFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsSKILL.md:187 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files- **本地 standalone CLI fallback**：可以设置 `GPT_IMAGE2_PPT_ENV=/path/to/private.env`，或使用 skill 安装目录下的 `.env`；这只是备用方式，不是业务项目 `.env`。Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/codex_backend.py:17 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files- Pro: no OPENAI_API_KEY needed in this skill's .env; reuses codex auth.Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/generate_ppt.py:85 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesSKILL_ROOT / ".env",Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Privileged sudo commandscripts/editable_pptx/workflow.py:39 · Privileged sudo command — agent may execute with elevated privileges" Linux: sudo apt-get install -y libreoffice"Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Access to sensitive file pathsscripts/generate_ppt.py:78 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files.env is only a standalone CLI fallback.Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsSKILL.md:206 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files> **安全提示**：脚本只读取当前进程环境、平台注入的 `gpt-image2-ppt_*` 变量、显式 `GPT_IMAGE2_PPT_ENV`，以及 skill 安装目录下的 `.env` fallback。脚本**不会**向上递归读取调用者项目目录里的 `.env`，避免误吃业务项目密钥。Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/generate_ppt.py:86 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesPath.home() / ".codex/skills/gpt-image2-ppt-skills/.env",Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/template_analyzer.py:895 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files# 找 .envFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/image_generator.py:24 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files# 本模块不调 load_dotenv()，避免 import 时无意识加载父目录 / cwd 的 .env。Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsagents/openclaw.yaml:8 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files# and skill-owned .env fallback only; never walks parent project directories.Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsinstall_as_skill.sh:123 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesif [ -f "$SKILL_DIR/.env" ]; thenFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsinstall_as_skill.sh:124 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filescp "$SKILL_DIR/.env" "/tmp/gpt-image2-ppt.env.bak"Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsinstall_as_skill.sh:153 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files--exclude='.env' \Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/template_analyzer.py:897 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesPath(__file__).parent / ".env",Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
Python subprocess execution detectedscripts/codex_backend.py:165 · Python subprocess execution detectedresult = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
HIGH
Access to sensitive file pathsscripts/generate_ppt.py:87 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesPath.home() / ".claude/skills/gpt-image2-ppt-skills/.env",Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/generate_ppt.py:76 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesThis intentionally does not read CWD/.env or walk parent directories. SkillFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/template_analyzer.py:898 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesPath.home() / ".claude/skills/gpt-image2-ppt-skills/.env",Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Privileged sudo commandscripts/render_template.py:510 · Privileged sudo command — agent may execute with elevated privileges" Linux: sudo apt-get install -y libreoffice",Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
MEDIUM
Python subprocess execution detectedscripts/render_template.py:381 · Python subprocess execution detectedresult = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/render_template.py:145 · Python subprocess execution detectedresult = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/render_template.py:278 · Python subprocess execution detectedresult = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/render_template.py:481 · Python subprocess execution detectedsubprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05

Cost to the agent

Instructions loaded
≈9,209 tok
2 files · 152 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.

What would make this Verified

3 points to 80 · weights: behavior 45%, static 25%, prompt 15%, publisher 15%
  1. Unclaimed publisher≈ +8 on the totalClaim huanyuqwq: a verified publisher gets +50 on publisher trust. It is free and usually instant with GitHub sign-in.
  2. Privileged sudo command≈ +4 on the totalBuild commands from fixed arguments; do not interpolate untrusted strings into a shell.
  3. Access to sensitive file paths≈ +4 on the totalStop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
  4. Python subprocess execution detected≈ +2 on the totalBuild commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
Publish a new version to ClawHub, then queue it here. Not your skill? Claim the handle to get verdict changes by email.Claim huanyuqwqPropose a patch to the maintainer