PPT Translator

Translate PowerPoint files to any language while preserving layout. Uses a render-and-verify agent loop (LibreOffice + Vision) to guarantee no text overflow....

This skill appears to be what it claims: a local utility + agent loop that rewrites PPTX and uses LibreOffice to render for overflow checks. Before installing/use: (1) Ensure LibreOffice and python-pptx are available locally; the script calls the libreoffice binary (subprocess) and will write output files in the specified directory. (2) Provide an explicit --output path when invoking the script (args.output is optional in code but passing None may cause errors). (3) Understand privacy implications: SKILL.md expects an LLM to translate and a Vision model to check renders — if your agent forwards slide content to external model APIs, that will send potentially sensitive data off your system and may require API keys not included here. (4) The script itself does not contact network endpoints or require secrets, but the overall workflow depends on your agent's LLM/Vision configuration; only install/run if you trust how those components will be invoked and where data will go. (5) As always, review or run the script in a safe environment on non-sensitive files first.

Type: OpenClaw Skill Name: ppt-translator Version: 1.0.0 The skill bundle's core script, `scripts/translate.py`, uses `subprocess.run` to execute the `libreoffice` command for rendering PowerPoint files. While this is a legitimate function for the stated purpose of the skill, it introduces a potential shell injection or path traversal vulnerability. If the OpenClaw agent were to pass unsanitized user-controlled input (e.g., file paths for `--input`, `--output`, or paths used by `libreoffice`) to this script, it could lead to arbitrary command execution or file system manipulation. There is no evidence of intentional malicious behavior such as data exfiltration, persistence, or prompt injection against the agent in `SKILL.md`.