← Back to Skills Marketplace
121
Downloads
1
Stars
1
Active Installs
1
Versions
Install in OpenClaw
/install ppt-mcp-server
Description
AI 驱动的 PPT 生成工具，通过执行 python-pptx 代码自动创建专业 PowerPoint 演示文稿
Usage Guidance
该 skill 的功能声明与实现一致：它会接受并执行由模型生成的 Python（python-pptx）代码，然后在本地 output/ 目录写出 .pptx 文件。不过实现直接用 exec 来运行未审查的代码且没有任何沙箱、网络或权限限制——这意味着传入代码可以访问本机文件、读取环境变量、发起网络请求或运行子进程，从而可能泄露凭据或损害主机。 Before installing or running: 1) only run on an isolated machine/container (no sensitive files or credentials), 2) prefer code-review: inspect generated python before executing, or modify server.py to run untrusted code in a sandboxed subprocess with restricted filesystem and no network, timeouts, and limited builtins, 3) run with a non-privileged user and restrict template/output directories' permissions, 4) consider adding explicit runtime restrictions (drop dangerous builtins, use subprocess in a chroot/container, disable network, set CPU/memory/time limits), and 5) if you need to trust the skill, ask the author for sandboxing evidence or a provenance-backed release. If the server included strong sandboxing or explicit restrictions on what generated code may do, this assessment could move toward benign.
Capability Assessment
Purpose & Capability
名称/描述与代码行为一致：skill 用于执行由模型生成的 python-pptx 代码并在本地 output/ 目录生成 .pptx。requirements.txt 列出了 mcp 和 python-pptx，SKILL.md 与 server.py 中的工具（execute_pptx_code、list_templates、list_output_files）相符。没有请求与目的不相关的环境变量或外部云凭据。
Instruction Scope
SKILL.md 要求模型生成完整可运行的 Python 代码并调用 execute_pptx_code。server.py 通过 exec(processed_code, exec_globals) 直接执行该代码（在切换到 OUTPUT_DIR 的上下文中运行并将 prs.save 路径重写到 output/）。虽然对 prs.save 和 Presentation(...) 做了路径重写，但没有对导入、文件 I/O、网络请求、子进程或任意系统调用做任何限制或沙箱隔离。换言之，传入的代码可以读取/修改文件系统、联网或尝试访问本机敏感数据——而 SKILL.md 没有说明这些风险或给出安全约束。
Install Mechanism
无安装脚本（instruction-only + 代码文件包含），requirements.txt 列出依赖但没有自动下载任意可疑二进制或外部 URL。整体安装机制为低风险，但运行时行为（exec 任意代码）是主要风险点，而非安装流程本身。
Credentials
skill 未请求环境变量或外部凭据，表面上看是合适的。注意：尽管未声明凭据，execute_pptx_code 执行的任意 Python 代码仍可在运行主机上读取环境变量或访问本地凭据文件（比如 ~/.aws/credentials、~/.git-credentials 等），因此未声明凭据并不等于无法被滥用。
Persistence & Privilege
flags 显示 always:false，user-invocable:true，disable-model-invocation:false（正常）。skill 不修改其他技能配置或系统级配置。要注意：允许模型自主调用工具是平台默认行为；结合可执行任意代码这一点，会扩大攻击面。
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install ppt-mcp-server - After installation, invoke the skill by name or use
/ppt-mcp-server - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
PPT Master MCP 1.0.0 – Initial release
- Introduces an AI-driven tool for automatic professional PowerPoint generation via python-pptx code execution.
- Provides tools to execute PPTX generation code, list available templates, and view output files.
- Minimal intervention: no preset templates; fully leverages AI creativity for slide content and design.
- Includes clear installation instructions, dependency listing, and cross-platform (OpenClaw, manual) setup guides.
- Enforces design and style standards (business blue default, 16:9 layout, Chinese/English fonts), and outlines prompt interaction rules for reliable and high-quality output.
Metadata
Frequently Asked Questions
What is ppt-mcp-server?
AI 驱动的 PPT 生成工具，通过执行 python-pptx 代码自动创建专业 PowerPoint 演示文稿. It is an AI Agent Skill for Claude Code / OpenClaw, with 121 downloads so far.
How do I install ppt-mcp-server?
Run "/install ppt-mcp-server" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is ppt-mcp-server free?
Yes, ppt-mcp-server is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does ppt-mcp-server support?
ppt-mcp-server is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created ppt-mcp-server?
It is built and maintained by Janson (@janson1983); the current version is v1.0.0.
More Skills