Slides

Create, edit, and automate presentations with programmatic tools, visual consistency, and project-based learning of user style preferences.

Plain-language checklist before installing or running this skill: - It's largely an instruction-only helper that expects to read/write files under ~/slides/. Back up any existing ~/slides/ data before use. - The skill documents using Google Slides, Marp, Slidev, decktape, Playwright, and npm installs. Those features require network access and, for Google Slides, credentials (service account JSON or OAuth). The skill metadata declares no credentials — assume cloud integrations are optional and will require you to supply credentials explicitly. - The scanner flagged unicode control characters in SKILL.md. This can be used to hide model-manipulating text. Inspect the SKILL.md and other files in a plain/hex viewer for non-printing characters before trusting the instructions. If you are not comfortable reading hidden characters, do not enable autonomous invocation. - If you will use Google Slides integration: never upload your personal service-account file or other secrets to third-party services. Prefer to run the Google-Slides steps locally and supply credentials only when you explicitly choose to. - Because the agent has discretion to pick tools, restrict automated/autonomous execution unless you trust it (run manually the first time). Consider running the skill in a sandbox environment or with a dedicated low-privilege user account. What would change this assessment: explicit metadata clarifying how cloud auth is handled (which env vars or file paths are required), removal/explanation of the unicode-control characters, or a minimal install spec that documents exactly what will be downloaded and executed. If the author supplies that information, confidence could be raised to 'high' and the status could move to 'benign'.

Type: OpenClaw Skill Name: slides Version: 1.0.0 The skill is classified as suspicious due to its inherent capabilities that introduce a significant attack surface, primarily the ability to execute shell commands (e.g., `npm install`, `npx`, `marp`, `decktape` as described in `tools.md`, and `mkdir -p` in `SKILL.md` and `memory-template.md`). This capability, while necessary for the skill's stated purpose of using programmatic tools, poses a risk for potential shell injection vulnerabilities if agent input is not rigorously sanitized. Additionally, the skill describes handling sensitive API credentials (`creds.json`) for the Google Slides API in `tools.md`, which, despite being a standard authentication method, represents a sensitive operation. While the `SKILL.md` includes strong 'NEVER' rules against unauthorized actions, the underlying capabilities warrant a 'suspicious' classification rather than 'benign' due to the potential for exploitation.