Fähigkeiten nature-image2ppt

📦

nature-image2ppt

Name: nature-image2ppt
Author: yuan1z0825

Inhaltsrevision r1 Hohes Risiko 🔑 Umgebungsvariablen⚙️ Externe Befehle🌐 Netzwerkzugriff📁 Dateisystemzugriff⚡ Enthält Skripte

Rebuild Slide Images as Editable PowerPoint

Flat slide images are difficult to revise or reuse. This skill reconstructs them as editable PowerPoint objects and validates the rendered result.

Unterstützt: Claude Codex Code(CC)

⚠️ 38 Schlecht

Vor der Installation anhalten und eine Bestätigung anfordern.

Prüfen Sie den Plan und holen Sie vor Änderungen an Dateien die ausdrückliche Zustimmung des Benutzers ein.

Mit meinem Agent installieren

Kopieren Sie diese Anfrage in Ihren Agent. Sie enthält die maßgebliche Skill-Seite und das Manifest.

Agent-Anfrage

Review the Skillstore skill "nature-image2ppt" from https://skillstore.io/skills/yuan1z0825-nature-image2ppt.md and its manifest at https://skillstore.io/api/skills/yuan1z0825-nature-image2ppt/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Ihr Agent sollte weiterhin seinen Plan anzeigen und alle von der Sicherheitsrichtlinie verlangten Bestätigungen anfordern.

Agent-lesbare Ressourcen

Verwenden Sie diese Links, wenn ein KI-Agent, Crawler oder Skript sauberen Kontext benötigt, statt die vollständige Seite zu lesen.

Markdown-Detailseite GET /skills/yuan1z0825-nature-image2ppt.md Signiertes manifest GET /api/skills/yuan1z0825-nature-image2ppt/manifest Signiertes lockfile GET /api/skills/yuan1z0825-nature-image2ppt/lockfile

Testen

„nature-image2ppt“ wird verwendet. A screenshot containing a title, three process cards, and connecting arrows.

Erwartetes Ergebnis:

An editable PowerPoint slide with native text boxes, cards, connectors, arrowheads, a preview, and completed quality evidence.

„nature-image2ppt“ wird verwendet. A scanned PDF with six lecture slides and mathematical formulas.

Erwartetes Ergebnis:

A six-slide PPTX with reconstructed text, rendered formula assets, page manifests, visual previews, and final validation results.

„nature-image2ppt“ wird verwendet. An image-only PPTX containing speaker notes and a complex knowledge graph.

Erwartetes Ergebnis:

A rebuilt deck with preserved notes, native graph nodes and connectors, bounded complex assets, and a report listing remaining bitmaps.

Sicherheitsaudit

Hohes Risiko

v1 • 19.8.2026 Versionsbericht öffnen

Most static matches are false positives from PowerPoint XML, Markdown backticks, defensive path tests, and fixed argument-list subprocess calls. Confirmed risks include credential access, external image and OCR transfers, plaintext secret configuration, and optional TeX shell escape. Semantic review also found automatic Codex token reuse, an unvalidated OCR result URL, and misleading cloud-consent language. Static review was capped at 400/784 representative findings; omitted static matches are unconfirmed, so automatic publishing stays disabled until manual review.

Gescannte Dateien

18,028

Analysierte Zeilen

Prüfelemente

Falschmeldungen ignoriert

Bestätigte Sicherheitsbedenken (3)

Hoch

cli/image2ppt/runtime/image_gen.py:217-230 cli/image2ppt/runtime/image_gen.py:355-380

Automatic Reuse of Local Codex OAuth Credentials

The image backend automatically reads a local Codex access token when present and sends it with slide prompts or images. Host allowlisting and redirect blocking limit exfiltration, but per-use consent is not required.

The code directly reads access_token from the Codex auth file, adds it as a bearer header, and posts a body containing task data.

Hoch

cli/image2ppt/runtime/paddle_text_hints.py:68-79

Unvalidated OCR Result URL Enables SSRF

The OCR client fetches a result URL supplied by the remote service without restricting its scheme, host, or redirects. A compromised response could make the client contact an unintended internal or external address.

The polling response controls status.resultUrl.jsonUrl, which is passed directly to requests.get without destination validation.

Mittel

cli/image2ppt/runtime/deck_text_hints.py:107-117

Misleading Cloud OCR Consent Language

The runtime describes a third-party OCR quota as risk-free and asks users to configure a token. This language omits document-upload privacy risks and may weaken informed consent.

The message explicitly claims the service is risk-free with no extra cost while encouraging token setup before reconstruction.

Elemente der Fähigkeitsprüfung (35)

Dies sind echte lokale Fähigkeiten, die für diese Fähigkeit erwartet werden können; daher müssen sie überprüft werden, werden jedoch nicht als bestätigtes bösartiges Verhalten gezählt.

Hoch

cli/image2ppt/runtime/image_gen.py:48

Generic API/secret keys

ENV_FIELDS = ("OPENAI_API_KEY", "OPENAI_BASE_URL", "IMAGE2PPT_IMAGE_MODEL")

This code path loads, checks, or forwards OPENAI_API_KEY for the external image backend. It is legitimate credential handling, but it exposes a sensitive secret to runtime code and API configuration.

Hoch

cli/image2ppt/runtime/image_gen.py:449

Generic API/secret keys

def _ensure_api_key(dry_run: bool) -> None:

This code path loads, checks, or forwards OPENAI_API_KEY for the external image backend. It is legitimate credential handling, but it exposes a sensitive secret to runtime code and API configuration.

Hoch

cli/image2ppt/runtime/image_gen.py:450

Generic API/secret keys

if os.getenv("OPENAI_API_KEY"):

This code path loads, checks, or forwards OPENAI_API_KEY for the external image backend. It is legitimate credential handling, but it exposes a sensitive secret to runtime code and API configuration.

Hoch

cli/image2ppt/runtime/image_gen.py:652

Generic API/secret keys

api_key=os.getenv("OPENAI_API_KEY"),

This code path loads, checks, or forwards OPENAI_API_KEY for the external image backend. It is legitimate credential handling, but it exposes a sensitive secret to runtime code and API configuration.

Hoch

cli/image2ppt/runtime/image_gen.py:905

Generic API/secret keys

_ensure_api_key(args.dry_run)

This code path loads, checks, or forwards OPENAI_API_KEY for the external image backend. It is legitimate credential handling, but it exposes a sensitive secret to runtime code and API configuration.

Hoch

cli/image2ppt/runtime/main.py:65

Generic API/secret keys

if args.api_key:

This code path loads, checks, or forwards OPENAI_API_KEY for the external image backend. It is legitimate credential handling, but it exposes a sensitive secret to runtime code and API configuration.

Hoch

cli/image2ppt/runtime/image_gen.py:46

Hidden file in home directory

DEFAULT_CODEX_AUTH_FILE = "~/.codex/auth.json"

This constant identifies the default local Codex OAuth credential file that the runtime later reads. Reusing a login token is sensitive even though outbound use is restricted to an official host.

Hoch

cli/image2ppt/runtime/runtime_env.py:19

Hidden file in home directory

DEFAULT_CODEX_AUTH_FILE = "~/.codex/auth.json"

This constant identifies the default local Codex OAuth credential file that the runtime later reads. Reusing a login token is sensitive even though outbound use is restricted to an official host.

Hoch

cli/image2ppt/runtime/formula_renderer.py:79

Python subprocess.run

result = subprocess.run(

The runtime executes a TeX engine on supplied formula content, and the CLI exposes an optional --shell-escape mode. Enabling that mode allows TeX content to invoke operating-system commands.

Hoch

cli/image2ppt/runtime/paddle_text_hints.py:78

Python HTTP libraries

jsonl = requests.get(status["resultUrl"]["jsonUrl"], timeout=60)

The code fetches a result URL supplied by the OCR response without validating its host or redirect chain. A compromised service response could direct the client to an unintended network target.

Mittel

cli/image2ppt/runtime/image_gen.py:46

Hidden file access

DEFAULT_CODEX_AUTH_FILE = "~/.codex/auth.json"

This constant identifies the default local Codex OAuth credential file that the runtime later reads. Reusing a login token is sensitive even though outbound use is restricted to an official host.

Mittel

cli/image2ppt/runtime/runtime_env.py:19

Hidden file access

DEFAULT_CODEX_AUTH_FILE = "~/.codex/auth.json"

This constant identifies the default local Codex OAuth credential file that the runtime later reads. Reusing a login token is sensitive even though outbound use is restricted to an official host.

Mittel

cli/image2ppt/runtime/runtime_env.py:94

Python file write/append

with os.fdopen(fd, "w", encoding="utf-8") as handle:

This write persists configuration values that may include API keys and OCR tokens in YAML. Owner-only permissions reduce exposure, but plaintext secret storage remains a credential risk.

Mittel

cli/image2ppt/runtime/image_gen.py:290

HTTP client library

def _open_codex_request(req: request.Request, timeout: int):

This function opens outbound Codex image requests. The destination is allowlisted and redirects are blocked, but task data and credentials cross a network boundary.

Mittel

cli/image2ppt/runtime/image_gen.py:380

HTTP client library

with _open_codex_request(req, timeout) as resp:

This is the outbound request that sends the image-generation body and bearer authorization to the official ChatGPT endpoint. Host validation reduces credential exfiltration risk.

Mittel

cli/image2ppt/runtime/paddle_text_hints.py:54

Python HTTP libraries

response = requests.post(

The code uploads a user slide or PDF and an authorization token to the PaddleOCR cloud endpoint. This is intentional but exposes document content to an external service.

Niedrig

cli/image2ppt/runtime/image_gen.py:163

getenv function call

if key not in ENV_FIELDS or os.getenv(key):