📦

nature-image2ppt

Name: nature-image2ppt
Author: yuan1z0825

مراجعة المحتوى r1 مخاطر عالية 🔑 متغيرات البيئة⚙️ الأوامر الخارجية🌐 الوصول إلى الشبكة📁 الوصول إلى نظام الملفات⚡ يحتوي على سكربتات

Rebuild Slide Images as Editable PowerPoint

Flat slide images are difficult to revise or reuse. This skill reconstructs them as editable PowerPoint objects and validates the rendered result.

يدعم: Claude Codex Code(CC)

⚠️ 38 ضعيف

توقف واطلب التأكيد قبل التثبيت.

راجع الخطة واحصل على موافقة صريحة من المستخدم قبل تغيير الملفات.

التثبيت باستخدام Agent لدي

انسخ هذا الطلب إلى Agent لديك. يتضمن صفحة Skill المعتمدة وملف manifest.

طلب الوكيل

Review the Skillstore skill "nature-image2ppt" from https://skillstore.io/skills/yuan1z0825-nature-image2ppt.md and its manifest at https://skillstore.io/api/skills/yuan1z0825-nature-image2ppt/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

يجب أن يواصل Agent عرض خطته وطلب أي تأكيد تفرضه سياسة الأمان.

موارد مهيّأة لـ Agents

استخدم هذه الروابط عندما يحتاج AI Agent أو crawler أو script إلى سياق نظيف بدلًا من قراءة الصفحة كاملة.

تفاصيل Markdown GET /skills/yuan1z0825-nature-image2ppt.md manifest موقَّع GET /api/skills/yuan1z0825-nature-image2ppt/manifest lockfile موقَّع GET /api/skills/yuan1z0825-nature-image2ppt/lockfile

اختبرها

جارٍ استخدام "nature-image2ppt". A screenshot containing a title, three process cards, and connecting arrows.

النتيجة المتوقعة:

An editable PowerPoint slide with native text boxes, cards, connectors, arrowheads, a preview, and completed quality evidence.

جارٍ استخدام "nature-image2ppt". A scanned PDF with six lecture slides and mathematical formulas.

النتيجة المتوقعة:

A six-slide PPTX with reconstructed text, rendered formula assets, page manifests, visual previews, and final validation results.

جارٍ استخدام "nature-image2ppt". An image-only PPTX containing speaker notes and a complex knowledge graph.

النتيجة المتوقعة:

A rebuilt deck with preserved notes, native graph nodes and connectors, bounded complex assets, and a report listing remaining bitmaps.

التدقيق الأمني

مخاطر عالية

v1 • ١٩‏/٨‏/٢٠٢٦ فتح التقرير المرتبط بالإصدار

Most static matches are false positives from PowerPoint XML, Markdown backticks, defensive path tests, and fixed argument-list subprocess calls. Confirmed risks include credential access, external image and OCR transfers, plaintext secret configuration, and optional TeX shell escape. Semantic review also found automatic Codex token reuse, an unvalidated OCR result URL, and misleading cloud-consent language. Static review was capped at 400/784 representative findings; omitted static matches are unconfirmed, so automatic publishing stays disabled until manual review.

الملفات التي تم فحصها

18,028

الأسطر التي تم تحليلها

عناصر المراجعة

تم تجاهل الإيجابيات الكاذبة

مخاوف أمنية مؤكدة (3)

مرتفع

cli/image2ppt/runtime/image_gen.py:217-230 cli/image2ppt/runtime/image_gen.py:355-380

Automatic Reuse of Local Codex OAuth Credentials

The image backend automatically reads a local Codex access token when present and sends it with slide prompts or images. Host allowlisting and redirect blocking limit exfiltration, but per-use consent is not required.

The code directly reads access_token from the Codex auth file, adds it as a bearer header, and posts a body containing task data.

مرتفع

cli/image2ppt/runtime/paddle_text_hints.py:68-79

Unvalidated OCR Result URL Enables SSRF

The OCR client fetches a result URL supplied by the remote service without restricting its scheme, host, or redirects. A compromised response could make the client contact an unintended internal or external address.

The polling response controls status.resultUrl.jsonUrl, which is passed directly to requests.get without destination validation.

متوسط

cli/image2ppt/runtime/deck_text_hints.py:107-117

Misleading Cloud OCR Consent Language

The runtime describes a third-party OCR quota as risk-free and asks users to configure a token. This language omits document-upload privacy risks and may weaken informed consent.

The message explicitly claims the service is risk-free with no extra cost while encouraging token setup before reconstruction.

عناصر مراجعة القدرات (35)

هذه قدرات محلية حقيقية قد يُتوقع وجودها لهذه المهارة، لذا فهي تتطلب مراجعة ولكن لا تُحتسب كسلوك خبيث مؤكد.

مرتفع

cli/image2ppt/runtime/image_gen.py:48

Generic API/secret keys

ENV_FIELDS = ("OPENAI_API_KEY", "OPENAI_BASE_URL", "IMAGE2PPT_IMAGE_MODEL")

This code path loads, checks, or forwards OPENAI_API_KEY for the external image backend. It is legitimate credential handling, but it exposes a sensitive secret to runtime code and API configuration.

مرتفع

cli/image2ppt/runtime/image_gen.py:449

Generic API/secret keys

def _ensure_api_key(dry_run: bool) -> None:

This code path loads, checks, or forwards OPENAI_API_KEY for the external image backend. It is legitimate credential handling, but it exposes a sensitive secret to runtime code and API configuration.

مرتفع

cli/image2ppt/runtime/image_gen.py:450

Generic API/secret keys

if os.getenv("OPENAI_API_KEY"):

This code path loads, checks, or forwards OPENAI_API_KEY for the external image backend. It is legitimate credential handling, but it exposes a sensitive secret to runtime code and API configuration.

مرتفع

cli/image2ppt/runtime/image_gen.py:652

Generic API/secret keys

api_key=os.getenv("OPENAI_API_KEY"),

This code path loads, checks, or forwards OPENAI_API_KEY for the external image backend. It is legitimate credential handling, but it exposes a sensitive secret to runtime code and API configuration.

مرتفع

cli/image2ppt/runtime/image_gen.py:905

Generic API/secret keys

_ensure_api_key(args.dry_run)

This code path loads, checks, or forwards OPENAI_API_KEY for the external image backend. It is legitimate credential handling, but it exposes a sensitive secret to runtime code and API configuration.

مرتفع

cli/image2ppt/runtime/main.py:65

Generic API/secret keys

if args.api_key:

This code path loads, checks, or forwards OPENAI_API_KEY for the external image backend. It is legitimate credential handling, but it exposes a sensitive secret to runtime code and API configuration.

مرتفع

cli/image2ppt/runtime/image_gen.py:46

Hidden file in home directory

DEFAULT_CODEX_AUTH_FILE = "~/.codex/auth.json"

This constant identifies the default local Codex OAuth credential file that the runtime later reads. Reusing a login token is sensitive even though outbound use is restricted to an official host.

مرتفع

cli/image2ppt/runtime/runtime_env.py:19

Hidden file in home directory

DEFAULT_CODEX_AUTH_FILE = "~/.codex/auth.json"

This constant identifies the default local Codex OAuth credential file that the runtime later reads. Reusing a login token is sensitive even though outbound use is restricted to an official host.

مرتفع

cli/image2ppt/runtime/formula_renderer.py:79

Python subprocess.run

result = subprocess.run(

The runtime executes a TeX engine on supplied formula content, and the CLI exposes an optional --shell-escape mode. Enabling that mode allows TeX content to invoke operating-system commands.

مرتفع

cli/image2ppt/runtime/paddle_text_hints.py:78

Python HTTP libraries

jsonl = requests.get(status["resultUrl"]["jsonUrl"], timeout=60)

The code fetches a result URL supplied by the OCR response without validating its host or redirect chain. A compromised service response could direct the client to an unintended network target.

متوسط

cli/image2ppt/runtime/image_gen.py:46

Hidden file access

DEFAULT_CODEX_AUTH_FILE = "~/.codex/auth.json"

This constant identifies the default local Codex OAuth credential file that the runtime later reads. Reusing a login token is sensitive even though outbound use is restricted to an official host.

متوسط

cli/image2ppt/runtime/runtime_env.py:19

Hidden file access

DEFAULT_CODEX_AUTH_FILE = "~/.codex/auth.json"

This constant identifies the default local Codex OAuth credential file that the runtime later reads. Reusing a login token is sensitive even though outbound use is restricted to an official host.

متوسط

cli/image2ppt/runtime/runtime_env.py:94

Python file write/append

with os.fdopen(fd, "w", encoding="utf-8") as handle:

This write persists configuration values that may include API keys and OCR tokens in YAML. Owner-only permissions reduce exposure, but plaintext secret storage remains a credential risk.

متوسط

cli/image2ppt/runtime/image_gen.py:290

HTTP client library

def _open_codex_request(req: request.Request, timeout: int):

This function opens outbound Codex image requests. The destination is allowlisted and redirects are blocked, but task data and credentials cross a network boundary.

متوسط

cli/image2ppt/runtime/image_gen.py:380

HTTP client library

with _open_codex_request(req, timeout) as resp:

This is the outbound request that sends the image-generation body and bearer authorization to the official ChatGPT endpoint. Host validation reduces credential exfiltration risk.

متوسط

cli/image2ppt/runtime/paddle_text_hints.py:54

Python HTTP libraries

response = requests.post(

The code uploads a user slide or PDF and an authorization token to the PaddleOCR cloud endpoint. This is intentional but exposes document content to an external service.

منخفض

cli/image2ppt/runtime/image_gen.py:163

getenv function call

if key not in ENV_FIELDS or os.getenv(key):