SlideSpeak

Generate, edit, and manage PowerPoint presentations via the SlideSpeak API. Use this skill when users want to create presentations from text or documents, edit existing presentations, or work with presentation templates.

This package appears to be a straightforward client for api.slidespeak.co. Before installing: (1) ensure you trust slidespeak.co and are willing to provide your SLIDESPEAK_API_KEY (the key is sent to api.slidespeak.co for every request); (2) the script requires Node (native fetch — Node 18+); (3) when using upload you will be instructing the script to read files from paths you provide (so don’t point it at sensitive files you don’t intend to upload); (4) webhook-subscribe lets SlideSpeak send POSTs to any URL you register — don’t register endpoints that would leak sensitive internal data. If you need higher assurance, verify the API domain and the script contents yourself and obtain the API key from your SlideSpeak account rather than reusing other credentials.

Type: OpenClaw Skill Name: slidespeak Version: 1.0.0 The skill bundle is classified as benign. While it requests `Bash Read Write` permissions, the `slidespeak.mjs` script uses these permissions in a manner consistent with its stated purpose: reading user-specified document files for upload and JSON configuration files for presentation generation. All network communication is directed to the legitimate `api.slidespeak.co` endpoint, and there is no evidence of data exfiltration to unauthorized domains, malicious execution patterns, persistence mechanisms, or prompt injection attempts in `SKILL.md` aiming to subvert the agent's behavior for harmful purposes. The webhook subscription feature is a legitimate API function, not a direct exfiltration vector by the skill itself.