← Back to Skills Marketplace
nethunter

HML Google Slides

by nethunter · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
443
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install hml-google-slides
Description
Create, edit, and export Google Slides presentations. Use when creating new presentations, adding or updating slides, reading slide content, exporting to PDF...
README (SKILL.md)

Google Slides

Uses the gog CLI for basic operations and scripts/slides.py for advanced edits (adding/editing slide content via the Slides API).

Auth Check

Before any Slides operation, verify auth is working:

gog slides info \x3Cany-presentation-id> --account [email protected]

If it fails, re-auth: gog auth add [email protected] --services gmail,calendar,drive,docs,sheets,contacts,tasks,people

Core Commands (via gog)

# Create a new blank presentation
gog slides create "My Presentation" --account [email protected] --json

# Get info about a presentation (slide count, title, etc.)
gog slides info \x3CpresentationId> --account [email protected] --json

# Export to PDF
gog slides export \x3CpresentationId> --format pdf --out /tmp/deck.pdf --account [email protected]

# Export to PPTX
gog slides export \x3CpresentationId> --format pptx --out /tmp/deck.pptx --account [email protected]

# Copy a presentation (e.g., to use a template)
gog slides copy \x3CpresentationId> "Copy Title" --account [email protected] --json

Adding/Editing Slide Content (via scripts/slides.py)

For adding text slides, batch updates, and reading full content, use scripts/slides.py.

# Add a text slide with title and bullet body
python3 scripts/slides.py add-slide \x3CpresentationId> \
  --title "Slide Title" \
  --body "• Bullet point one\
• Bullet point two"

# Add a slide at a specific position (0-indexed)
python3 scripts/slides.py add-slide \x3CpresentationId> --title "Intro" --insert-at 0

# Run arbitrary batch update requests from a JSON file
python3 scripts/slides.py batch \x3CpresentationId> requests.json

# Export via script
python3 scripts/slides.py export \x3CpresentationId> --format pdf --out /tmp/deck.pdf

# List comments with their anchors (e.g. which slide they are on)
python3 scripts/slides.py list-comments \x3CpresentationId>

# Resolve a comment and optionally leave a reply message
python3 scripts/slides.py resolve-comment \x3CpresentationId> \x3CcommentId> --reply "Fixed!"

Building a Deck from Scratch

Typical workflow:

  1. Create presentation: gog slides create "Title" --json → get presentationId
  2. Add slides one by one using scripts/slides.py add-slide
  3. For rich content (images, shapes, formatting), write batch requests to a JSON file and run scripts/slides.py batch
  4. Export: gog slides export \x3Cid> --format pdf --out /tmp/deck.pdf

For complex batch requests (images, shapes, text formatting), see references/batch_requests.md.

Getting Presentation ID

From a Google Slides URL: https://docs.google.com/presentation/d/**\x3CpresentationId>**/edit

Notes

  • gog slides uses the Drive API under the hood (no separate Slides scope needed)
  • scripts/slides.py uses the Google Slides API directly and requires working gog auth tokens
  • Set [email protected] in env to skip --account flag
Usage Guidance
This skill will use the 'gog' CLI and your gog-stored OAuth credentials to act on Google Slides and Drive. Before installing, confirm: (1) you trust the skill author and the default account (the code defaults to [email protected] unless you set GOG_ACCOUNT); (2) you are comfortable that the script will export and read refresh tokens and client_id/client_secret from ~/.config/gogcli/credentials.json (the skill metadata did not declare this); (3) the recommended re-auth command requests wide Google scopes (gmail, calendar, etc.) — only grant scopes you intend. If you proceed, set GOG_ACCOUNT to your own account, inspect ~/.config/gogcli/credentials.json contents and permissions, and consider running the skill in an isolated or throwaway environment. Ask the publisher to update metadata to declare the required 'gog' binary and the config path, and to explain why broad scopes and the hardcoded default account are necessary.
Capability Analysis
Type: OpenClaw Skill Name: hml-google-slides Version: 1.0.0 The skill is classified as suspicious due to several significant vulnerabilities. The `scripts/slides.py` exports a Google OAuth refresh token to `/tmp/gog_slides_token.json` without cleanup, creating a local information disclosure risk. The `cmd_export` function allows arbitrary file paths for output, potentially leading to unauthorized file writes. Most critically, the `cmd_batch` function executes arbitrary Google Slides API batch update requests from a user-provided JSON file, which, as documented in `references/batch_requests.md`, enables powerful actions like inserting images from arbitrary URLs (SSRF risk) and other broad API manipulations without input validation. While these are vulnerabilities rather than direct malicious intent, they present a substantial attack surface.
Capability Assessment
ℹ Purpose & Capability
The name/description (Google Slides create/edit/export) matches the code and instructions: the script uses the Slides and Drive APIs and the SKILL.md documents expected commands. However the skill uses the external 'gog' CLI and reads gog's credentials file (~/.config/gogcli/credentials.json) even though the registry metadata declares no required binaries or config paths — a mismatch between declared requirements and actual needs.
⚠ Instruction Scope
SKILL.md instructs running gog commands and a re-auth that requests wide scopes (gmail,calendar,drive,docs,sheets,contacts,tasks,people). The runtime instructions and scripts perform token export via `gog auth tokens export`, read local credential files, and refresh OAuth tokens — actions beyond simply calling Slides APIs. The skill also hardcodes the account '[email protected]' as the default, which is unexpected and could lead to confusion or accidental use of another user's account.
✓ Install Mechanism
No install spec (instruction-only plus a bundled script). That minimizes supply-chain install risk. The script does call external CLI ('gog') at runtime instead of installing anything itself.
⚠ Credentials
The script reads sensitive local state: it exports tokens to /tmp/gog_slides_token.json and reads ~/.config/gogcli/credentials.json (client_id and client_secret) to refresh OAuth tokens. The registry declared no required env or config paths, yet the code depends on them. SKILL.md also suggests re-authenticating with many Google scopes (including Gmail), which is broader than strictly necessary for Slides/Drive and is disproportionate unless explicitly justified. The default GOG_ACCOUNT value ([email protected]) is hardcoded and surprising.
✓ Persistence & Privilege
The skill is not always-enabled and doesn't request special platform-level persistence. It doesn't modify other skills or system-wide settings. It does, however, read and write token data to /tmp and user config, which is normal for OAuth usage but should be noted.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install hml-google-slides
  3. After installation, invoke the skill by name or use /hml-google-slides
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
HML-specific Google Slides management skill
Metadata
Slug hml-google-slides
Version 1.0.0
License —
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is HML Google Slides?

Create, edit, and export Google Slides presentations. Use when creating new presentations, adding or updating slides, reading slide content, exporting to PDF... It is an AI Agent Skill for Claude Code / OpenClaw, with 443 downloads so far.

How do I install HML Google Slides?

Run "/install hml-google-slides" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is HML Google Slides free?

Yes, HML Google Slides is completely free (open-source). You can download, install and use it at no cost.

Which platforms does HML Google Slides support?

HML Google Slides is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created HML Google Slides?

It is built and maintained by nethunter (@nethunter); the current version is v1.0.0.

More Skills
self-improving agent
Captures learnings, errors, and corrections to enable continuous improvement. Use when: (1) A command or operation fails unexpectedly, (2) User corrects Clau...
⬇ 463283 · by pskoett
Skill Vetter
Security-first skill vetting for AI agents. Use before installing any skill from ClawdHub, GitHub, or other sources. Checks for red flags, permission scope, and suspicious patterns.
⬇ 259410 · by spclaudehome
Polymarket
Query Polymarket prediction markets. Check odds, find trending markets, search events, track price movements.
⬇ 232503 · by joelchance
Self-Improving + Proactive Agent
Self-reflection + Self-criticism + Self-learning + Self-organizing memory. Agent evaluates its own work, catches mistakes, and improves permanently. Use when...
⬇ 200423 · by ivangdavila
Github
Interact with GitHub using the `gh` CLI. Use `gh issue`, `gh pr`, `gh run`, and `gh api` for issues, PRs, CI runs, and advanced queries.
⬇ 191115 · by steipete
ontology
Typed knowledge graph for structured agent memory and composable skills. Use when creating/querying entities (Person, Project, Task, Event, Document), linkin...
⬇ 190156 · by oswalpalash

💬 Comments