Habilidades nature-image2ppt

📦

nature-image2ppt

Name: nature-image2ppt
Author: yuan1z0825

Revisión del contenido r1 Riesgo alto 🔑 Variables de entorno⚙️ Comandos externos🌐 Acceso a red📁 Acceso al sistema de archivos⚡ Contiene scripts

Rebuild Slide Images as Editable PowerPoint

Flat slide images are difficult to revise or reuse. This skill reconstructs them as editable PowerPoint objects and validates the rendered result.

Compatible con: Claude Codex Code(CC)

⚠️ 38 Deficiente

Maintain this Skill? Claim it ⚠️ 38 Deficiente

Detente y solicita confirmación antes de instalar.

Revisa el plan y obtén el consentimiento explícito del usuario antes de modificar archivos.

Instalar con mi Agente

Copia esta solicitud en tu Agente. Incluye la página canónica del Skill y el manifiesto.

Solicitud de agente

Review the Skillstore skill "nature-image2ppt" from https://skillstore.io/skills/yuan1z0825-nature-image2ppt.md and its manifest at https://skillstore.io/api/skills/yuan1z0825-nature-image2ppt/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Tu Agente debe seguir mostrando su plan y solicitar cualquier confirmación exigida por la política de seguridad.

Recursos legibles por agentes

Usa estos enlaces cuando un agente de IA, crawler o script necesite contexto limpio en vez de leer la página completa.

Detalle Markdown GET /skills/yuan1z0825-nature-image2ppt.md Manifest firmado GET /api/skills/yuan1z0825-nature-image2ppt/manifest Lockfile firmado GET /api/skills/yuan1z0825-nature-image2ppt/lockfile

Pruébalo

Usando "nature-image2ppt". A screenshot containing a title, three process cards, and connecting arrows.

Resultado esperado:

An editable PowerPoint slide with native text boxes, cards, connectors, arrowheads, a preview, and completed quality evidence.

Usando "nature-image2ppt". A scanned PDF with six lecture slides and mathematical formulas.

Resultado esperado:

A six-slide PPTX with reconstructed text, rendered formula assets, page manifests, visual previews, and final validation results.

Usando "nature-image2ppt". An image-only PPTX containing speaker notes and a complex knowledge graph.

Resultado esperado:

A rebuilt deck with preserved notes, native graph nodes and connectors, bounded complex assets, and a report listing remaining bitmaps.

Auditoría de seguridad

Riesgo alto

v1 • 19/8/2026 Abrir el informe versionado

Most static matches are false positives from PowerPoint XML, Markdown backticks, defensive path tests, and fixed argument-list subprocess calls. Confirmed risks include credential access, external image and OCR transfers, plaintext secret configuration, and optional TeX shell escape. Semantic review also found automatic Codex token reuse, an unvalidated OCR result URL, and misleading cloud-consent language. Static review was capped at 400/784 representative findings; omitted static matches are unconfirmed, so automatic publishing stays disabled until manual review.

Archivos escaneados

18,028

Líneas analizadas

Elementos de revisión

Falsos positivos ignorados

Preocupaciones de seguridad confirmadas (3)

Alto

cli/image2ppt/runtime/image_gen.py:217-230 cli/image2ppt/runtime/image_gen.py:355-380

Automatic Reuse of Local Codex OAuth Credentials

The image backend automatically reads a local Codex access token when present and sends it with slide prompts or images. Host allowlisting and redirect blocking limit exfiltration, but per-use consent is not required.

The code directly reads access_token from the Codex auth file, adds it as a bearer header, and posts a body containing task data.

Alto

cli/image2ppt/runtime/paddle_text_hints.py:68-79

Unvalidated OCR Result URL Enables SSRF

The OCR client fetches a result URL supplied by the remote service without restricting its scheme, host, or redirects. A compromised response could make the client contact an unintended internal or external address.

The polling response controls status.resultUrl.jsonUrl, which is passed directly to requests.get without destination validation.

Medio

cli/image2ppt/runtime/deck_text_hints.py:107-117

Misleading Cloud OCR Consent Language

The runtime describes a third-party OCR quota as risk-free and asks users to configure a token. This language omits document-upload privacy risks and may weaken informed consent.

The message explicitly claims the service is risk-free with no extra cost while encouraging token setup before reconstruction.

Elementos de revisión de capacidades (35)

Estas son capacidades locales reales que pueden esperarse para esta habilidad, por lo que requieren revisión, pero no se cuentan como comportamiento malicioso confirmado.

Alto

cli/image2ppt/runtime/image_gen.py:48

Generic API/secret keys

ENV_FIELDS = ("OPENAI_API_KEY", "OPENAI_BASE_URL", "IMAGE2PPT_IMAGE_MODEL")

This code path loads, checks, or forwards OPENAI_API_KEY for the external image backend. It is legitimate credential handling, but it exposes a sensitive secret to runtime code and API configuration.

Alto

cli/image2ppt/runtime/image_gen.py:449

Generic API/secret keys

def _ensure_api_key(dry_run: bool) -> None:

This code path loads, checks, or forwards OPENAI_API_KEY for the external image backend. It is legitimate credential handling, but it exposes a sensitive secret to runtime code and API configuration.

Alto

cli/image2ppt/runtime/image_gen.py:450

Generic API/secret keys

if os.getenv("OPENAI_API_KEY"):

This code path loads, checks, or forwards OPENAI_API_KEY for the external image backend. It is legitimate credential handling, but it exposes a sensitive secret to runtime code and API configuration.

Alto

cli/image2ppt/runtime/image_gen.py:652

Generic API/secret keys

api_key=os.getenv("OPENAI_API_KEY"),

This code path loads, checks, or forwards OPENAI_API_KEY for the external image backend. It is legitimate credential handling, but it exposes a sensitive secret to runtime code and API configuration.

Alto

cli/image2ppt/runtime/image_gen.py:905

Generic API/secret keys

_ensure_api_key(args.dry_run)

This code path loads, checks, or forwards OPENAI_API_KEY for the external image backend. It is legitimate credential handling, but it exposes a sensitive secret to runtime code and API configuration.

Alto

cli/image2ppt/runtime/main.py:65

Generic API/secret keys

if args.api_key:

This code path loads, checks, or forwards OPENAI_API_KEY for the external image backend. It is legitimate credential handling, but it exposes a sensitive secret to runtime code and API configuration.

Alto

cli/image2ppt/runtime/image_gen.py:46

Hidden file in home directory

DEFAULT_CODEX_AUTH_FILE = "~/.codex/auth.json"

This constant identifies the default local Codex OAuth credential file that the runtime later reads. Reusing a login token is sensitive even though outbound use is restricted to an official host.

Alto

cli/image2ppt/runtime/runtime_env.py:19

Hidden file in home directory

DEFAULT_CODEX_AUTH_FILE = "~/.codex/auth.json"

This constant identifies the default local Codex OAuth credential file that the runtime later reads. Reusing a login token is sensitive even though outbound use is restricted to an official host.

Alto

cli/image2ppt/runtime/formula_renderer.py:79

Python subprocess.run

result = subprocess.run(

The runtime executes a TeX engine on supplied formula content, and the CLI exposes an optional --shell-escape mode. Enabling that mode allows TeX content to invoke operating-system commands.

Alto

cli/image2ppt/runtime/paddle_text_hints.py:78

Python HTTP libraries

jsonl = requests.get(status["resultUrl"]["jsonUrl"], timeout=60)

The code fetches a result URL supplied by the OCR response without validating its host or redirect chain. A compromised service response could direct the client to an unintended network target.

Medio

cli/image2ppt/runtime/image_gen.py:46

Hidden file access

DEFAULT_CODEX_AUTH_FILE = "~/.codex/auth.json"

This constant identifies the default local Codex OAuth credential file that the runtime later reads. Reusing a login token is sensitive even though outbound use is restricted to an official host.

Medio

cli/image2ppt/runtime/runtime_env.py:19

Hidden file access

DEFAULT_CODEX_AUTH_FILE = "~/.codex/auth.json"

This constant identifies the default local Codex OAuth credential file that the runtime later reads. Reusing a login token is sensitive even though outbound use is restricted to an official host.

Medio

cli/image2ppt/runtime/runtime_env.py:94

Python file write/append

with os.fdopen(fd, "w", encoding="utf-8") as handle:

This write persists configuration values that may include API keys and OCR tokens in YAML. Owner-only permissions reduce exposure, but plaintext secret storage remains a credential risk.

Medio

cli/image2ppt/runtime/image_gen.py:290

HTTP client library

def _open_codex_request(req: request.Request, timeout: int):

This function opens outbound Codex image requests. The destination is allowlisted and redirects are blocked, but task data and credentials cross a network boundary.

Medio

cli/image2ppt/runtime/image_gen.py:380

HTTP client library

with _open_codex_request(req, timeout) as resp:

This is the outbound request that sends the image-generation body and bearer authorization to the official ChatGPT endpoint. Host validation reduces credential exfiltration risk.

Medio

cli/image2ppt/runtime/paddle_text_hints.py:54

Python HTTP libraries

response = requests.post(

The code uploads a user slide or PDF and an authorization token to the PaddleOCR cloud endpoint. This is intentional but exposes document content to an external service.

Bajo

cli/image2ppt/runtime/image_gen.py:163

getenv function call

if key not in ENV_FIELDS or os.getenv(key):