Frontend Slides

Create stunning, animation-rich HTML presentations from scratch or convert PowerPoint files (.ppt/.pptx) to beautiful web slides. Use when the user wants to...

This skill appears to do what it claims: generate and convert presentations. It will ask to read files and folders you point it to (PPTs, HTML, images) — only grant access to directories you trust. For PPT conversion and image processing you may need to install python-pptx and Pillow locally; the skill does not fetch or execute code from remote URLs. Avoid handing over slides or folders that contain sensitive credentials or private data. If you want tighter control, run the conversion locally yourself (install python-pptx/Pillow) and paste only the exported text/images you want the agent to use.

Type: OpenClaw Skill Name: myclaw-frontend-slides Version: 1.0.0 The skill bundle is classified as suspicious due to potential shell injection and path traversal vulnerabilities identified in the `SKILL.md` instructions. In Phase 1, the agent is instructed to `ls` a user-provided image folder, which could lead to arbitrary command execution if the path is not properly sanitized. In Phase 4, the PPT conversion process involves writing files to an `output_dir` derived from user input, posing a path traversal risk if the directory is not sanitized, potentially allowing files to be written outside the intended scope. These are vulnerabilities that could be exploited, rather than clear evidence of intentional malicious behavior.