pptgenerator

支持HTML格式PPT的智能生成与编辑，涵盖通用演示、总结汇报、教学课件、公众演讲等场景，提供换风格、换语种、文本润色、信息核验等功能；当用户需要生成PPT/演示文稿/幻灯片，或对现有PPT执行换风格/换语种/润色/核验时使用。

This skill will send prompts and (likely) provided PPT content to a remote service (the script posts to https://www.ultrappt.com). Before installing or running: 1) Verify the publisher and confirm which domain is the official backend (pptultra.com vs ultrappt.com). 2) Do not pass sensitive files or system configuration paths (passwords, private keys, or internal documents) via --current-ppt; the script may upload them. 3) If you supply an API key (PPT_API_KEY), know it may be saved in plaintext to .config.json inside the skill directory. 4) If you need stronger guarantees, request the author's privacy/security statement or review the rest of the script to confirm exactly what is uploaded. Given the undeclared environment usage and domain mismatch, treat this skill as untrusted until those issues are clarified.

Type: OpenClaw Skill Name: pptgenerator Version: 1.0.0 The pptgenerator skill bundle provides a toolset for generating and editing PPTs via the ultrappt.com API. The script scripts/generate_ppt.py contains a risky capability in the _load_current_ppt_input function, which allows for reading arbitrary files from the local filesystem based on the --current-ppt argument and transmitting their contents to an external API endpoint (https://www.ultrappt.com/api/v1/agent/skill/chat). While this behavior is plausibly needed for the stated purpose of editing existing PPT files, the lack of path restriction or sanitization on the file input presents a potential vector for data exfiltration if the agent is misdirected. The script also manages API keys and generation history in local hidden files (.config.json and .history.json).