← 返回 Skills 市场
phil-osophy-42

123

作者 philsun · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
38
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install 12321321123
功能描述
Generate PPT decks from prompts/block XML while preserving corporate brand style.
使用说明 (SKILL.md)

Corporate PPT Generator

Description

Generate a new .pptx by reusing existing template slides from PPT_Template.pptx. The runtime is XML-only and prioritizes template-first rendering.

When To Use

Use this skill when the user asks:

  • "Generate a PPT from a prompt or outline"
  • "Create a deck in DaoCloud style / company brand style"
  • "Render PPT from structured block/xml with template consistency"

Inputs

  • title: optional deck title fallback
  • output_filename: output pptx filename
  • template_file: optional template filename in skill directory
  • block_xml: block/xml payload (required)
  • render_strategy: template_first | template_only
  • allow_html_fallback: allow html/richtext block fallback to template content slides

Output

  • output_path: absolute path to generated pptx
  • slide_count: number of slides generated
  • message: status message

Notes

  • Requires python-pptx.
  • Uses local PPT_Template.pptx in skill directory by default.
  • Use assets/demo_blocks.xml for a full XML demo (toc + matrix + pie/bar/line + table + slogan).
安全使用建议
Before installing, confirm you trust the package source, install python-pptx in a controlled environment, and provide a trusted PPT_Template.pptx if you want the default corporate styling. The supplied artifacts do not show malicious behavior.
功能分析
Type: OpenClaw Skill Name: 12321321123 Version: 1.0.0 The skill is designed to generate PowerPoint presentations from XML data but contains a Path Traversal vulnerability in 'src/index.py'. The 'output_filename' parameter is used to construct a file path without sanitization, which could allow an attacker to overwrite files outside the intended directory. Additionally, the use of 'xml.etree.ElementTree' for parsing 'block_xml' poses a risk of XML External Entity (XXE) attacks. While these are significant security flaws, there is no evidence of intentional malice or data exfiltration.
能力评估
Purpose & Capability
The stated purpose, manifest, and visible Python code align around generating PPTX files from XML and templates. The registry name/slug are generic compared with the internal skill name, and the default PPT template is not present in the supplied file manifest.
Instruction Scope
The instructions are scoped to generating presentations from block XML and do not contain goal-hijacking, hidden prompts, credential requests, or autonomous behavior outside that purpose.
Install Mechanism
There is no install spec, but README.md and requirements.txt disclose a manual python-pptx dependency install. This is expected for the stated purpose but should be installed in a trusted Python environment.
Credentials
The visible behavior is local file processing for PPT templates, XML input, and generated presentation/catalog outputs. No network access, credential use, shell execution, or unrelated data access is evidenced.
Persistence & Privilege
No background service, persistence mechanism, privileged access, credential storage, or ongoing agent behavior is shown. Generated files are part of the intended workflow.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install 12321321123
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /12321321123 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
- Initial release of Corporate PPT Generator. - Generates PowerPoint decks from prompts or block XML while maintaining corporate brand style. - Reuses slides from an existing template (`PPT_Template.pptx`) with a template-first XML rendering approach. - Supports input options for title, output filename, template selection, block XML content, rendering strategy, and HTML fallback. - Outputs the generated PPTX path, slide count, and a status message.
元数据
Slug 12321321123
版本 1.0.0
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 1
常见问题

123 是什么?

Generate PPT decks from prompts/block XML while preserving corporate brand style. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 38 次。

如何安装 123?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install 12321321123」即可一键安装,无需额外配置。

123 是免费的吗?

是的,123 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

123 支持哪些平台?

123 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 123?

由 philsun(@phil-osophy-42)开发并维护,当前版本 v1.0.0。

💬 留言讨论