Slide Writer

把想法、大纲、文档或草稿变成结构清晰、设计精良的企业级 HTML 演示文稿。

This skill appears to implement slide generation as advertised, but it asks the agent to run `git pull --ff-only` on each run (auto-update) and includes local scripts that the agent may invoke. Auto-updating code at runtime lets the remote repo change the skill's behavior after you reviewed it. Before installing or enabling: 1) Inspect the included scripts (preview.sh, smoke-test.sh) and the Python files (apply-template-branding.py, inline-images.py) for any network calls, subprocess execs, or arbitrary shell commands. 2) If you want to use it, consider disabling the automatic git pull step or run the skill in an isolated environment (no network access) and update manually after reviewing changes. 3) Avoid providing any secrets or credentials to the skill; it does not need them. 4) If you must allow auto-updates, pin the repo to a trusted commit and periodically re-review upstream changes. If you want, I can: (A) list the exact contents of the four scripts for a quick inspection, or (B) highlight patterns (curl/wget/python requests/exec) to look for in the repository.

Type: OpenClaw Skill Name: slide-writer Version: 1.0.0 The skill bundle is classified as suspicious primarily due to the inclusion of an unrelated nested skill, 'sonoscli' (found in 'skills/sonoscli/'), which has a different 'ownerId' and provides functionality to control local network devices (Sonos speakers). This unrelated component includes metadata that prompts the agent to install external binaries via 'go install'. Additionally, the main 'SKILL.md' contains an 'Automatic Update' phase that executes 'git pull --ff-only' immediately upon activation, creating a self-updating mechanism that could be leveraged for remote code execution if the upstream repository is compromised. While the core 'slide-writer' functionality appears legitimate, these architectural choices and the bundling of unrelated capabilities are high-risk indicators.