Habilidades skywork-ppt
📦
skywork-ppt
Revisión del contenido r1 Riesgo alto 🌐 Acceso a red🔑 Variables de entorno📁 Acceso al sistema de archivos⚙️ Comandos externos
Crear presentaciones PowerPoint con Skywork
Crear presentaciones pulidas a partir de temas, archivos o plantillas sin procesar puede requerir muchos pasos manuales. Esta skill automatiza la generación de PPTX, la imitación de plantillas, la edición y las operaciones locales de diapositivas mediante flujos de trabajo de Skywork.
Compatible con: Claude Codex Code(CC)
Detente y solicita confirmación antes de instalar.
Revisa el plan y obtén el consentimiento explícito del usuario antes de modificar archivos.
Instalar con mi Agente
Copia esta solicitud en tu Agente. Incluye la página canónica del Skill y el manifiesto.
Solicitud de agente
Review the Skillstore skill "skywork-ppt" from https://skillstore.io/skills/skyworkai-skywork-ppt.md and its manifest at https://skillstore.io/api/skills/skyworkai-skywork-ppt/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.Tu Agente debe seguir mostrando su plan y solicitar cualquier confirmación exigida por la política de seguridad.
Recursos legibles por agentes
Usa estos enlaces cuando un agente de IA, crawler o script necesite contexto limpio en vez de leer la página completa.
Pruébalo
Usando "skywork-ppt". Crea una presentación en inglés de 6 diapositivas sobre automatización de soporte al cliente para una reunión de liderazgo.
Resultado esperado:
La skill devuelve una ruta de PPTX generado, un enlace de descarga, el título de la presentación y una descripción concisa diapositiva por diapositiva.
Usando "skywork-ppt". Usa mi plantilla local y crea una nueva presentación de lanzamiento de producto.
Resultado esperado:
La skill carga la plantilla, genera un nuevo PPTX con un diseño similar e informa qué archivo de plantilla se usó.
Usando "skywork-ppt". Elimina las diapositivas 3 y 7 de este PPTX y guarda una copia recortada.
Resultado esperado:
La skill ejecuta una operación local de diapositivas e informa la ruta del PPTX guardado con el cambio completado en el número de diapositivas.
Auditoría de seguridad
Riesgo altov4 • 7/7/2026 Abrir el informe versionado
The skill has legitimate presentation-generation functionality, but it depends heavily on external Skywork APIs, local file uploads, token handling, and command execution. I confirmed the high-risk token cache, browser-launch subprocesses, document upload paths, and several filesystem risks, while dismissing Markdown backtick and placeholder URL false positives. No prompt injection attempt was found in the reviewed files.
12
Archivos escaneados
2,255
Líneas analizadas
95
Elementos de revisión
0
Falsos positivos ignorados
Preocupaciones de seguridad confirmadas (6)
Alto
workflow_generate.md:7-10scripts/parse_file.py:41-42workflow_imitate.md:82-89scripts/upload_files.py:68-80
Third-Party Upload of Local Presentation Inputs
The workflows and scripts upload user-provided documents, templates, or PPTX files to Skywork services for parsing, storage, or generation. This is expected functionality, but it can disclose sensitive local files if the user has not given explicit approval.
The workflow text explicitly tells the agent to upload reference files or templates, and the scripts read file bytes before POSTing to Skywork endpoints.
Alto
Persistent Token Cache Without Permission Hardening
The authentication flow caches Skywork token data in ~/.skywork_token and reloads it later. The write path does not apply restrictive permissions or use an operating system credential store.
The token cache path and JSON write are direct, and I found no chmod, keychain, or permission check around the stored credential.
Alto
Query-Controlled Search Result File Path
The web search script builds an output filename from the raw query string before writing search results. A crafted query containing path separators or an absolute path can influence where the result file is written.
The query comes from CLI arguments, is concatenated into the filename, and is passed to open() without sanitization or basename normalization.
Bajo
System reconnaissance
3. No valid token → opens browser for login, polls until complete, saves token
The instructions state that the login flow opens a browser, polls for completion, and saves a token. This is security relevant authentication behavior.
Bajo
System reconnaissance
**This skill requires Python 3 (>=3.8). Run the following before any script to locate a valid Python
The instructions enumerate candidate Python binaries with command -v and test versions. This is limited host inspection for dependency setup.
Bajo
System reconnaissance
After writing the reference report, save it to a local temp file to avoid shell encoding issues:
The workflow instructs saving a reference report to a temp file. It is not reconnaissance, but it is still filesystem behavior with potentially sensitive content.
Elementos de revisión de capacidades (95)
Estas son capacidades locales reales que pueden esperarse para esta habilidad, por lo que requieren revisión, pero no se cuentan como comportamiento malicioso confirmado.
Alto
Python subprocess.Popen
subprocess.Popen(["open", url], start_new_session=True,
The authentication flow spawns OS commands to open a browser, and the Windows branch uses shell=True. The commands are fixed, but launching external processes from a skill is a real execution risk.
Alto
Python subprocess.Popen
subprocess.Popen(["start", url], shell=True, start_new_session=True,
The authentication flow spawns OS commands to open a browser, and the Windows branch uses shell=True. The commands are fixed, but launching external processes from a skill is a real execution risk.
Alto
Python subprocess.Popen
subprocess.Popen(["xdg-open", url], start_new_session=True,
The authentication flow spawns OS commands to open a browser, and the Windows branch uses shell=True. The commands are fixed, but launching external processes from a skill is a real execution risk.
Alto
Hidden file in home directory
Token is stored in user home directory as ~/.skywork_token (JSON format).
The skill stores or documents a persistent Skywork token in ~/.skywork_token in the user home directory. A cached bearer token can be reused by other local processes or users if permissions are weak.
Alto
Hidden file in home directory
TOKEN_FILE = os.path.expanduser("~/.skywork_token")
The skill stores or documents a persistent Skywork token in ~/.skywork_token in the user home directory. A cached bearer token can be reused by other local processes or users if permissions are weak.
Alto
Hidden file access
Token is stored in user home directory as ~/.skywork_token (JSON format).
The skill stores or documents a persistent Skywork token in ~/.skywork_token in the user home directory. A cached bearer token can be reused by other local processes or users if permissions are weak.
Alto
Hidden file access
TOKEN_FILE = os.path.expanduser("~/.skywork_token")
The skill stores or documents a persistent Skywork token in ~/.skywork_token in the user home directory. A cached bearer token can be reused by other local processes or users if permissions are weak.
Alto
Python file write/append
with open(TOKEN_FILE, "w", encoding="utf-8") as f:
The script writes token data to the persistent ~/.skywork_token cache. The code does not set restrictive file permissions around the credential write.
Alto
Python HTTP libraries
import urllib.request
The script reads local files and uploads their full bytes to Skywork object storage through the gateway. This is a direct exfiltration surface for sensitive files if invoked without clear consent.
Alto
Python HTTP libraries
req = urllib.request.Request(
The script reads local files and uploads their full bytes to Skywork object storage through the gateway. This is a direct exfiltration surface for sensitive files if invoked without clear consent.
Alto
Python HTTP libraries
with urllib.request.urlopen(req, timeout=60) as resp:
The script reads local files and uploads their full bytes to Skywork object storage through the gateway. This is a direct exfiltration surface for sensitive files if invoked without clear consent.
Alto
Python file write/append
with open(out_path, "w", encoding="utf-8") as f:
The script writes search results to a filename derived from the raw query string. A crafted query can influence the output path and leave sensitive search context on disk.
Alto
Hidden file in home directory
2. Cached token file `~/.skywork_token` → validate via API, if valid, use it
The instructions explicitly use a cached ~/.skywork_token credential file. Persistent hidden-token storage is a real credential exposure risk.
Alto
Hidden file access
2. Cached token file `~/.skywork_token` → validate via API, if valid, use it
The instructions explicitly use a cached ~/.skywork_token credential file. Persistent hidden-token storage is a real credential exposure risk.
Medio
Python HTTP libraries
from urllib.request import Request, urlopen
The script uploads user-provided files to the Skywork Office parse service and streams results back. This is a real external data transfer risk for sensitive documents.
Medio
Hardcoded URL
SKYWORK_OFFICE_URL - Base URL (default: https://api-tools.skywork.ai/theme-gateway)
The script uploads user-provided files to the Skywork Office parse service and streams results back. This is a real external data transfer risk for sensitive documents.
Medio
Python file write/append
with open(args.output, "w", encoding="utf-8") as f:
The optional output path writes parsed document content to disk. A user-controlled path can overwrite writable files or leave sensitive extracted text behind.
Medio
Python HTTP libraries
import urllib.request
The script sends prompts, references, uploaded file metadata, and tokens to Skywork generation or edit APIs, then downloads the PPTX result. This is intentional but security relevant network transfer.
Medio
Python HTTP libraries
req = urllib.request.Request(
The script sends prompts, references, uploaded file metadata, and tokens to Skywork generation or edit APIs, then downloads the PPTX result. This is intentional but security relevant network transfer.
Medio
Python HTTP libraries
with urllib.request.urlopen(req, timeout=600) as resp:
The script sends prompts, references, uploaded file metadata, and tokens to Skywork generation or edit APIs, then downloads the PPTX result. This is intentional but security relevant network transfer.
Medio
Python HTTP libraries
req2 = urllib.request.Request(download_url, method="GET")
The script sends prompts, references, uploaded file metadata, and tokens to Skywork generation or edit APIs, then downloads the PPTX result. This is intentional but security relevant network transfer.
Medio
Python HTTP libraries
with urllib.request.urlopen(req2, timeout=120) as r:
The script sends prompts, references, uploaded file metadata, and tokens to Skywork generation or edit APIs, then downloads the PPTX result. This is intentional but security relevant network transfer.
Medio
Temp directory access
log_file = f"/tmp/ppt_run_{session_id}.log" if args.log_path == "" else args.log_path
The script creates or appends log files and writes the generated PPTX to a caller-controlled output path. This can expose content in logs or overwrite writable files if paths are unsafe.
Medio
Python file write/append
with open(log_file, "a", encoding="utf-8") as f:
The script creates or appends log files and writes the generated PPTX to a caller-controlled output path. This can expose content in logs or overwrite writable files if paths are unsafe.
Medio
Python file write/append
open(log_file, "w").close() # clear previous run
The script creates or appends log files and writes the generated PPTX to a caller-controlled output path. This can expose content in logs or overwrite writable files if paths are unsafe.
Medio
Python file write/append
with open(out_abs, "wb") as f:
The script creates or appends log files and writes the generated PPTX to a caller-controlled output path. This can expose content in logs or overwrite writable files if paths are unsafe.
Medio
Hardcoded URL
API_BASE = os.environ.get("SKYWORK_API_BASE", "https://api.skywork.ai")
The authentication module contacts Skywork login and token validation endpoints. This sends authentication state to an external service and is security relevant.
Medio
Hardcoded URL
LOGIN_BASE_URL = os.environ.get("SKYWORK_WEB_BASE", "https://skywork.ai")
The authentication module contacts Skywork login and token validation endpoints. This sends authentication state to an external service and is security relevant.
Medio
Python environment access
API_BASE = os.environ.get("SKYWORK_API_BASE", "https://api.skywork.ai")
The API and web login bases are environment-overridable. This can redirect authentication traffic if the environment is not trusted.
Medio
Python environment access
LOGIN_BASE_URL = os.environ.get("SKYWORK_WEB_BASE", "https://skywork.ai")
The API and web login bases are environment-overridable. This can redirect authentication traffic if the environment is not trusted.
Medio
Python environment access
env_token = os.environ.get("SKYBOT_TOKEN", "")
The script reads SKYBOT_TOKEN from the environment and uses it as an authentication token. Environment-sourced credentials are sensitive and later authorize network calls.
Medio
Python environment access
env_token = os.environ.get("SKYBOT_TOKEN", "")
The script reads SKYBOT_TOKEN from the environment and uses it as an authentication token. Environment-sourced credentials are sensitive and later authorize network calls.
Medio
Python HTTP libraries
import urllib.request
The script sends search queries to a Skywork web search API with an authentication token. Queries can contain sensitive project or business context.
Medio
Python HTTP libraries
req = urllib.request.Request(
The script sends search queries to a Skywork web search API with an authentication token. Queries can contain sensitive project or business context.
Medio
Python HTTP libraries
with urllib.request.urlopen(req, timeout=30) as resp:
The script sends search queries to a Skywork web search API with an authentication token. Queries can contain sensitive project or business context.
Medio
Temp file creation
import tempfile
The script creates a temporary directory for search result files. Temporary storage is legitimate but can retain sensitive query results after the run.
Medio
Temp file creation
out_dir = tempfile.mkdtemp(prefix="web_search_")
The script creates a temporary directory for search result files. Temporary storage is legitimate but can retain sensitive query results after the run.
Medio
Ruby/shell backtick execution
```bash
The static pattern is present, and I did not find enough context to dismiss it safely. Keeping the finding confirmed with low confidence.
Medio
Ruby/shell backtick execution
```
The static pattern is present, and I did not find enough context to dismiss it safely. Keeping the finding confirmed with low confidence.
Medio
Ruby/shell backtick execution
1. Environment variable `SKYBOT_TOKEN` → if set, use directly
The static pattern is present, and I did not find enough context to dismiss it safely. Keeping the finding confirmed with low confidence.
Medio
Ruby/shell backtick execution
2. Cached token file `~/.skywork_token` → validate via API, if valid, use it
The static pattern is present, and I did not find enough context to dismiss it safely. Keeping the finding confirmed with low confidence.
Medio
Ruby/shell backtick execution
**IMPORTANT - Login URL handling**: If script output contains a line starting with `[LOGIN_URL]`, yo
The static pattern is present, and I did not find enough context to dismiss it safely. Keeping the finding confirmed with low confidence.
Medio
Ruby/shell backtick execution
```bash
The static pattern is present, and I did not find enough context to dismiss it safely. Keeping the finding confirmed with low confidence.
Medio
Ruby/shell backtick execution
```
The static pattern is present, and I did not find enough context to dismiss it safely. Keeping the finding confirmed with low confidence.
Medio
Ruby/shell backtick execution
> After this check, replace `python` with the discovered `$PYTHON_CMD` (e.g. `python3`) in all subse
The static pattern is present, and I did not find enough context to dismiss it safely. Keeping the finding confirmed with low confidence.
Medio
Ruby/shell backtick execution
0. **REQUIRED FIRST STEP** — Read [workflow_generate.md](workflow_generate.md) NOW, before taking an
The static pattern is present, and I did not find enough context to dismiss it safely. Keeping the finding confirmed with low confidence.
Medio
Ruby/shell backtick execution
1. **Environment check** — run the check above to get `$PYTHON_CMD`.
The static pattern is present, and I did not find enough context to dismiss it safely. Keeping the finding confirmed with low confidence.
Medio
Ruby/shell backtick execution
2. **Upload reference files** (if the user provides local files as content source) — parse the file
The static pattern is present, and I did not find enough context to dismiss it safely. Keeping the finding confirmed with low confidence.
Medio
Ruby/shell backtick execution
3. **Web search** (required if no relevant content is already in the conversation) — call web_search
The static pattern is present, and I did not find enough context to dismiss it safely. Keeping the finding confirmed with low confidence.
Medio
Ruby/shell backtick execution
> **Important**: set exec tool `yieldMs` to `600000` (10 minutes).
The static pattern is present, and I did not find enough context to dismiss it safely. Keeping the finding confirmed with low confidence.
Medio
Ruby/shell backtick execution
5. **Deliver** — provide the absolute `.pptx` path and the download URL.
The static pattern is present, and I did not find enough context to dismiss it safely. Keeping the finding confirmed with low confidence.
Medio
Ruby/shell backtick execution
1. **Environment check** — run the check above to get `$PYTHON_CMD`.
The static pattern is present, and I did not find enough context to dismiss it safely. Keeping the finding confirmed with low confidence.
Medio
Ruby/shell backtick execution
2. **Locate the template** — extract the absolute path of the local `.pptx` from the user's message;
The static pattern is present, and I did not find enough context to dismiss it safely. Keeping the finding confirmed with low confidence.
Medio
Ruby/shell backtick execution
3. **Upload the template** — upload it and extract `TEMPLATE_URL` from the output.
The static pattern is present, and I did not find enough context to dismiss it safely. Keeping the finding confirmed with low confidence.
Medio
Ruby/shell backtick execution
4. **Upload reference files** (if the user provides additional local files as content source) — pars
The static pattern is present, and I did not find enough context to dismiss it safely. Keeping the finding confirmed with low confidence.
Medio
Ruby/shell backtick execution
5. **Web search** (required if no relevant content is already in the conversation) — call web_search
The static pattern is present, and I did not find enough context to dismiss it safely. Keeping the finding confirmed with low confidence.
Medio
Ruby/shell backtick execution
> **Important**: set exec tool `yieldMs` to `600000` (10 minutes).
The static pattern is present, and I did not find enough context to dismiss it safely. Keeping the finding confirmed with low confidence.
Medio
Ruby/shell backtick execution
7. **Deliver** — provide the absolute `.pptx` path, the download URL, and the template filename used
The static pattern is present, and I did not find enough context to dismiss it safely. Keeping the finding confirmed with low confidence.
Medio
Ruby/shell backtick execution
1. **Environment check** — run the check above to get `$PYTHON_CMD`.
The static pattern is present, and I did not find enough context to dismiss it safely. Keeping the finding confirmed with low confidence.
Medio
Ruby/shell backtick execution
3. **Run the script** with `--pptx-url`:
The static pattern is present, and I did not find enough context to dismiss it safely. Keeping the finding confirmed with low confidence.
Medio
Ruby/shell backtick execution
```bash
The static pattern is present, and I did not find enough context to dismiss it safely. Keeping the finding confirmed with low confidence.
Medio
Ruby/shell backtick execution
```
The static pattern is present, and I did not find enough context to dismiss it safely. Keeping the finding confirmed with low confidence.
Medio
Ruby/shell backtick execution
> **Important**: set exec tool `yieldMs` to `600000` (10 minutes).
The static pattern is present, and I did not find enough context to dismiss it safely. Keeping the finding confirmed with low confidence.
Medio
Ruby/shell backtick execution
```bash
The static pattern is present, and I did not find enough context to dismiss it safely. Keeping the finding confirmed with low confidence.
Medio
Ruby/shell backtick execution
```
The static pattern is present, and I did not find enough context to dismiss it safely. Keeping the finding confirmed with low confidence.
Medio
Ruby/shell backtick execution
- **Insufficient benefit**: When calling scripts (generate, imitate, or edit), the script or log may
The static pattern is present, and I did not find enough context to dismiss it safely. Keeping the finding confirmed with low confidence.
Medio
Ruby/shell backtick execution
- **Format**: One short sentence in the user's language + a link like `[Upgrade now →](url)` or the
The static pattern is present, and I did not find enough context to dismiss it safely. Keeping the finding confirmed with low confidence.
Medio
Ruby/shell backtick execution
- **URL**: Extract the upgrade URL from the log/script output (e.g. the `at https://...` part).
The static pattern is present, and I did not find enough context to dismiss it safely. Keeping the finding confirmed with low confidence.
Medio
Ruby/shell backtick execution
- **Python 3.8+** (required) — `python3` / `python` must be on PATH
The static pattern is present, and I did not find enough context to dismiss it safely. Keeping the finding confirmed with low confidence.
Medio
Shell command substitution
echo "Found Python: $PYTHON_CMD ($($PYTHON_CMD --version))"
The static pattern is present, and I did not find enough context to dismiss it safely. Keeping the finding confirmed with low confidence.
Medio
Template literal with command substitution
```bash
The static pattern is present, and I did not find enough context to dismiss it safely. Keeping the finding confirmed with low confidence.
Medio
Shell command substitution
PPT_LOG=/tmp/ppt_$(date +%s).log
The workflow instructs shell command substitution while running and monitoring background PPT jobs. It is expected process control, but it requires local command execution.
Medio
Shell command substitution
PPT_PID=$(grep '^\[PID\]' "$PPT_LOG" | tail -1 | awk '{print $2}')
The workflow instructs shell command substitution while running and monitoring background PPT jobs. It is expected process control, but it requires local command execution.
Medio
Temp directory access
PPT_LOG=/tmp/ppt_$(date +%s).log
The workflow creates a predictable timestamp-based log file under /tmp. Logs may contain PPT progress or error details and can persist after execution.
Medio
Shell command substitution
PPT_LOG=/tmp/ppt_$(date +%s).log
The workflow instructs shell command substitution while running and monitoring background PPT jobs. It is expected process control, but it requires local command execution.
Medio
Shell command substitution
PPT_PID=$(grep '^\[PID\]' "$PPT_LOG" | tail -1 | awk '{print $2}')
The workflow instructs shell command substitution while running and monitoring background PPT jobs. It is expected process control, but it requires local command execution.
Medio
Temp directory access
cat > /tmp/ppt_reference.md << 'REFERENCE_EOF'
The workflow writes reference material and logs under /tmp using predictable names. These files can contain sensitive source content or generation details.
Medio
Temp directory access
- **--reference-file** (optional): Pass the path to the temp file written at the end of Step 2 (e.g.
The workflow writes reference material and logs under /tmp using predictable names. These files can contain sensitive source content or generation details.
Medio
Temp directory access
PPT_LOG=/tmp/ppt_$(date +%s).log
The workflow writes reference material and logs under /tmp using predictable names. These files can contain sensitive source content or generation details.
Medio
Temp directory access
--reference-file /tmp/ppt_reference.md \
The workflow writes reference material and logs under /tmp using predictable names. These files can contain sensitive source content or generation details.
Medio
Shell command substitution
PPT_LOG=/tmp/ppt_$(date +%s).log
The workflow instructs shell command substitution while running and monitoring background PPT jobs. It is expected process control, but it requires local command execution.
Medio
Shell command substitution
PPT_PID=$(grep '^\[PID\]' "$PPT_LOG" | tail -1 | awk '{print $2}')
The workflow instructs shell command substitution while running and monitoring background PPT jobs. It is expected process control, but it requires local command execution.
Medio
Temp directory access
cat > /tmp/ppt_reference.md << 'REFERENCE_EOF'
The workflow writes reference material, uses /tmp paths, or documents template paths. Temporary files and local paths can expose sensitive presentation content.
Medio
Temp directory access
- **--reference-file** (optional): Path to the temp file written at the end of Step 3 (e.g. `/tmp/pp
The workflow writes reference material, uses /tmp paths, or documents template paths. Temporary files and local paths can expose sensitive presentation content.
Medio
Temp directory access
PPT_LOG=/tmp/ppt_$(date +%s).log
The workflow writes reference material, uses /tmp paths, or documents template paths. Temporary files and local paths can expose sensitive presentation content.
Medio
Temp directory access
--reference-file /tmp/ppt_reference.md \
The workflow writes reference material, uses /tmp paths, or documents template paths. Temporary files and local paths can expose sensitive presentation content.
Medio
Temp directory access
| Use this template to make a PPT on AI trends — template at `/tmp/style.pptx` | ✅ Imitate |
The workflow writes reference material, uses /tmp paths, or documents template paths. Temporary files and local paths can expose sensitive presentation content.
Bajo
Hardcoded URL
SKYWORK_AUTH_API_BASE = "https://api.skywork.ai"
This config defines external Skywork API endpoints that the skill uses for authentication, parsing, upload, search, and PPT generation. Network destinations are expected but still require disclosure and trust in a third-party service.
Bajo
Hardcoded URL
SKYWORK_WEB_BASE = "https://skywork.ai"
This config defines external Skywork API endpoints that the skill uses for authentication, parsing, upload, search, and PPT generation. Network destinations are expected but still require disclosure and trust in a third-party service.
Bajo
Hardcoded URL
SKYWORK_OFFICE_URL = os.environ.get("SKYWORK_OFFICE_URL", "https://api.skywork.ai/skywork-office-rou
This config defines external Skywork API endpoints that the skill uses for authentication, parsing, upload, search, and PPT generation. Network destinations are expected but still require disclosure and trust in a third-party service.
Bajo
Hardcoded URL
SKYWORK_GATEWAY_URL = os.environ.get("SKYWORK_GATEWAY_URL", "https://api-tools.skywork.ai/theme-gate
This config defines external Skywork API endpoints that the skill uses for authentication, parsing, upload, search, and PPT generation. Network destinations are expected but still require disclosure and trust in a third-party service.
Bajo
Python environment access
SKYWORK_OFFICE_URL = os.environ.get("SKYWORK_OFFICE_URL", "https://api.skywork.ai/skywork-office-rou
The service base URL can be overridden from the environment. That is useful for deployment but can redirect uploads or tokens if the execution environment is compromised.
Bajo
Python environment access
SKYWORK_GATEWAY_URL = os.environ.get("SKYWORK_GATEWAY_URL", "https://api-tools.skywork.ai/theme-gate
The service base URL can be overridden from the environment. That is useful for deployment but can redirect uploads or tokens if the execution environment is compromised.
Bajo
Python environment access
payload["source_platform"] = "skyclaw" if os.environ.get("POD_TYPE", "") == "skyclaw" else ""
The script reads POD_TYPE from the environment to set source_platform. The value is low sensitivity but confirms environment-dependent behavior.
Bajo
Python environment access
payload = {"query": query, "source_platform": "skyclaw" if os.environ.get("POD_TYPE", "") == "skycla
The script reads POD_TYPE from the environment to set source_platform. This is low sensitivity but confirms environment-dependent behavior.
Factores de riesgo
🌐 Acceso a red (34)
scripts/config.py:9 scripts/config.py:12 scripts/config.py:16 scripts/config.py:19 scripts/local_pptx_ops.py:91 scripts/parse_file.py:24 scripts/parse_file.py:12 scripts/run_ppt_write.py:16 scripts/run_ppt_write.py:296 scripts/run_ppt_write.py:305 scripts/run_ppt_write.py:328 scripts/run_ppt_write.py:329 scripts/run_ppt_write.py:231 scripts/skywork_auth.py:41 scripts/skywork_auth.py:42 scripts/upload_files.py:15 scripts/upload_files.py:81 scripts/upload_files.py:91 scripts/upload_files.py:106 scripts/web_search.py:14 scripts/web_search.py:24 scripts/web_search.py:31 SKILL.md:61 SKILL.md:115 SKILL.md:156 workflow_edit.md:49 workflow_generate.md:21 workflow_generate.md:27 workflow_generate.md:28 workflow_generate.md:133 workflow_imitate.md:46 workflow_imitate.md:52 workflow_imitate.md:53 workflow_imitate.md:117
🔑 Variables de entorno (8)
📁 Acceso al sistema de archivos (33)
scripts/parse_file.py:157 scripts/run_ppt_write.py:244 scripts/run_ppt_write.py:34 scripts/run_ppt_write.py:245 scripts/run_ppt_write.py:330 scripts/skywork_auth.py:6 scripts/skywork_auth.py:44 scripts/skywork_auth.py:6 scripts/skywork_auth.py:44 scripts/skywork_auth.py:172 scripts/upload_files.py:106 scripts/web_search.py:13 scripts/web_search.py:60 scripts/web_search.py:71 SKILL.md:28 SKILL.md:28 SKILL.md:53 workflow_edit.md:52 workflow_edit.md:73 workflow_edit.md:45 workflow_generate.md:136 workflow_generate.md:156 workflow_generate.md:87 workflow_generate.md:117 workflow_generate.md:128 workflow_generate.md:132 workflow_imitate.md:120 workflow_imitate.md:141 workflow_imitate.md:74 workflow_imitate.md:100 workflow_imitate.md:111 workflow_imitate.md:116 workflow_imitate.md:187
⚙️ Comandos externos (43)
scripts/skywork_auth.py:87 scripts/skywork_auth.py:90 scripts/skywork_auth.py:93 SKILL.md:21-24 SKILL.md:24-27 SKILL.md:27-28 SKILL.md:28-31 SKILL.md:31-50 SKILL.md:50-69 SKILL.md:69-71 SKILL.md:71 SKILL.md:78-79 SKILL.md:79-80 SKILL.md:80 SKILL.md:81-83 SKILL.md:83 SKILL.md:84-92 SKILL.md:92-93 SKILL.md:93-94 SKILL.md:94-95 SKILL.md:95 SKILL.md:96-98 SKILL.md:98 SKILL.md:99-109 SKILL.md:109-111 SKILL.md:111-112 SKILL.md:112-117 SKILL.md:117-118 SKILL.md:118 SKILL.md:125-140 SKILL.md:140-148 SKILL.md:148-155 SKILL.md:155-156 SKILL.md:156-162 SKILL.md:162 SKILL.md:65 SKILL.md:50-69 workflow_edit.md:45 workflow_edit.md:71 workflow_generate.md:128 workflow_generate.md:154 workflow_imitate.md:111 workflow_imitate.md:139
Patrones detectados
System reconnaissance×3
Auditado por: codex Ver historial de auditorías →
Compartir y citar este informe
Comparte el informe de evaluación versionado, la insignia neutral, la tarjeta insertable y las citas. Skillstore presenta evidencias sin decidir si este Skill es seguro.
Copiar enlace del informe
https://skillstore.io/skills/skyworkai-skywork-ppt/audits/4?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportInsignia Markdown
[](https://skillstore.io/skills/skyworkai-skywork-ppt?utm_source=security_passport_badge)Insignia HTML
<a href="https://skillstore.io/skills/skyworkai-skywork-ppt?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/skyworkai-skywork-ppt/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Tarjeta para insertar
<iframe src="https://skillstore.io/embed/skills/skyworkai-skywork-ppt.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Citas académicas (APA · BibTeX · CFF)
Cita APA
SkyworkAI. (2026). skywork-ppt security audit report (audit version 4) [Author version unspecified]. Skillstore. https://skillstore.io/skills/skyworkai-skywork-ppt/audits/4Cita BibTeX
@techreport{skyworkai-skyworkai-skywork-ppt-2026,
author = {SkyworkAI},
title = {skywork-ppt security audit report (audit version 4)},
institution = {Skillstore},
year = {2026},
number = {4},
url = {https://skillstore.io/skills/skyworkai-skywork-ppt/audits/4},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "skywork-ppt security audit report (audit version 4)"
version: "unspecified"
type: report
authors:
- name: "SkyworkAI"
date-released: "2026-07-07"
url: "https://skillstore.io/skills/skyworkai-skywork-ppt/audits/4"
identifiers:
- type: other
value: "skillstore:skyworkai-skywork-ppt:audit:4"
description: "Skillstore immutable audit report identifier"
Puntuación de Skillstore
Por qué esta puntuación Confianza de la evidencia: Medio 45
Arquitectura
85
Mantenibilidad
87
Contenido
69
Comunidad
83
Cumplimiento de la especificación
Lo que puedes crear
Crear una presentación informativa a partir de un tema
Convierte un tema, una audiencia, un número de diapositivas y notas de apoyo en un PPTX generado con registros de progreso y un enlace de descarga.
Reutilizar el estilo de presentación de una empresa
Carga una plantilla PPTX y crea una nueva presentación que siga el diseño y la estructura visual de la plantilla.
Limpiar un archivo de diapositivas existente
Inspecciona, elimina, reordena, extrae o combina diapositivas localmente sin enviar la presentación al backend de generación.
Prueba estos prompts
Generar una presentación simple
Crea un PPTX en inglés sobre tendencias de energía renovable para una audiencia empresarial general. Usa 8 diapositivas y un estilo profesional limpio.
Generar a partir de archivos de referencia
Crea una presentación para inversores de 10 diapositivas a partir del informe de mercado adjunto. Conserva exactamente las cifras clave, las fechas y los nombres de empresas.
Imitar el estilo de una plantilla
Usa la plantilla PPTX en esta ruta local y crea una presentación de 12 diapositivas sobre nuestra hoja de ruta de producto de 2026. Coincide con la estructura de la plantilla.
Editar y reorganizar una presentación
Edita esta URL de PPTX para agregar un nuevo resumen ejecutivo después de la diapositiva 2 y luego crea una copia local con las diapositivas 4 y 5 eliminadas.
Mejores prácticas
- Confirma si los archivos contienen datos confidenciales antes de usar flujos de trabajo de carga, análisis, edición o imitación de plantillas.
- Proporciona el número de diapositivas, la audiencia, el idioma y los requisitos de estilo antes de iniciar la generación.
- Usa operaciones locales de diapositivas para tareas simples de eliminación, reordenamiento, extracción o combinación cuando no se necesite generación en el backend.
Evitar
- No cargues archivos regulados, secretos o confidenciales de clientes sin autorización explícita.
- No dependas de la investigación generada para afirmaciones sensibles al tiempo sin comprobar las fechas de las fuentes.
- No ejecutes el flujo de autenticación en máquinas compartidas sin revisar el almacenamiento y la limpieza de tokens.
Preguntas frecuentes
¿Esta skill necesita una cuenta de Skywork?
Sí. Los flujos de trabajo de generación, edición, carga, análisis y búsqueda requieren autenticación de Skywork.
¿Puede trabajar solo con archivos PPTX locales?
Sí, para tareas de eliminación, reordenamiento, extracción, combinación e información básica de archivos. La generación y la edición con IA usan servicios externos.
¿Se cargarán mis archivos?
Los archivos se cargan al usar flujos de trabajo de análisis, imitación de plantillas o edición basada en URL. Las operaciones locales de diapositivas no requieren carga al backend.
¿Qué idiomas puede generar?
Los flujos de trabajo pasan el idioma detectado del usuario al backend, como inglés o chino.
¿Puede usar una plantilla de empresa?
Sí. Proporciona una ruta de plantilla PPTX, y el flujo de trabajo de imitación la carga como referencia de estilo y diseño.
¿Qué debo comprobar antes de instalarla?
Revisa las llamadas a APIs externas, el comportamiento de caché de tokens, los subprocesos de inicio de navegador y los flujos de trabajo de carga de archivos locales.
Detalles del desarrollador
Autor
SkyworkAILicencia
MIT
Revisión de Skillstore
r1
Aviso de versión
El autor no declaró una versión.
Ref.
f93e9bb0daca99badb6a7e574b97737155d57cb3
Actualidad del mantenimiento
18/7/2026
Uso
51 descargas · 140 vistas
Estructura de archivos