Compétences nature-image2ppt

📦

nature-image2ppt

Name: nature-image2ppt
Author: yuan1z0825

Révision du contenu r1 Risque élevé 🔑 Variables d’environnement⚙️ Commandes externes🌐 Accès réseau📁 Accès au système de fichiers⚡ Contient des scripts

Rebuild Slide Images as Editable PowerPoint

Flat slide images are difficult to revise or reuse. This skill reconstructs them as editable PowerPoint objects and validates the rendered result.

Prend en charge: Claude Codex Code(CC)

⚠️ 38 Médiocre

Maintain this Skill? Claim it ⚠️ 38 Médiocre

Arrêtez-vous et demandez confirmation avant l’installation.

Examinez le plan et obtenez le consentement explicite de l’utilisateur avant de modifier des fichiers.

Installer avec mon Agent

Copiez cette demande dans votre Agent. Elle contient la page Skill de référence et le manifeste.

Demande d’agent

Review the Skillstore skill "nature-image2ppt" from https://skillstore.io/skills/yuan1z0825-nature-image2ppt.md and its manifest at https://skillstore.io/api/skills/yuan1z0825-nature-image2ppt/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Votre Agent doit toujours présenter son plan et demander toute confirmation exigée par la politique de sécurité.

Ressources lisibles par les agents

Utilisez ces liens lorsqu’un Agent IA, un crawler ou un script a besoin d’un contexte propre au lieu de lire toute la page.

Détail Markdown GET /skills/yuan1z0825-nature-image2ppt.md manifest signé GET /api/skills/yuan1z0825-nature-image2ppt/manifest lockfile signé GET /api/skills/yuan1z0825-nature-image2ppt/lockfile

Tester

Utilisation de « nature-image2ppt ». A screenshot containing a title, three process cards, and connecting arrows.

Résultat attendu:

An editable PowerPoint slide with native text boxes, cards, connectors, arrowheads, a preview, and completed quality evidence.

Utilisation de « nature-image2ppt ». A scanned PDF with six lecture slides and mathematical formulas.

Résultat attendu:

A six-slide PPTX with reconstructed text, rendered formula assets, page manifests, visual previews, and final validation results.

Utilisation de « nature-image2ppt ». An image-only PPTX containing speaker notes and a complex knowledge graph.

Résultat attendu:

A rebuilt deck with preserved notes, native graph nodes and connectors, bounded complex assets, and a report listing remaining bitmaps.

Audit de sécurité

Risque élevé

v1 • 19/08/2026 Ouvrir le rapport versionné

Most static matches are false positives from PowerPoint XML, Markdown backticks, defensive path tests, and fixed argument-list subprocess calls. Confirmed risks include credential access, external image and OCR transfers, plaintext secret configuration, and optional TeX shell escape. Semantic review also found automatic Codex token reuse, an unvalidated OCR result URL, and misleading cloud-consent language. Static review was capped at 400/784 representative findings; omitted static matches are unconfirmed, so automatic publishing stays disabled until manual review.

Fichiers analysés

18,028

Lignes analysées

Éléments à examiner

Faux positifs ignorés

Préoccupations de sécurité confirmées (3)

Élevé

cli/image2ppt/runtime/image_gen.py:217-230 cli/image2ppt/runtime/image_gen.py:355-380

Automatic Reuse of Local Codex OAuth Credentials

The image backend automatically reads a local Codex access token when present and sends it with slide prompts or images. Host allowlisting and redirect blocking limit exfiltration, but per-use consent is not required.

The code directly reads access_token from the Codex auth file, adds it as a bearer header, and posts a body containing task data.

Élevé

cli/image2ppt/runtime/paddle_text_hints.py:68-79

Unvalidated OCR Result URL Enables SSRF

The OCR client fetches a result URL supplied by the remote service without restricting its scheme, host, or redirects. A compromised response could make the client contact an unintended internal or external address.

The polling response controls status.resultUrl.jsonUrl, which is passed directly to requests.get without destination validation.

Moyen

cli/image2ppt/runtime/deck_text_hints.py:107-117

Misleading Cloud OCR Consent Language

The runtime describes a third-party OCR quota as risk-free and asks users to configure a token. This language omits document-upload privacy risks and may weaken informed consent.

The message explicitly claims the service is risk-free with no extra cost while encouraging token setup before reconstruction.

Éléments d’évaluation des capacités (35)

Il s’agit de capacités locales réelles qui peuvent être attendues pour cette compétence ; elles nécessitent donc un examen, mais ne sont pas comptabilisées comme comportement malveillant confirmé.

Élevé

cli/image2ppt/runtime/image_gen.py:48

Generic API/secret keys

ENV_FIELDS = ("OPENAI_API_KEY", "OPENAI_BASE_URL", "IMAGE2PPT_IMAGE_MODEL")

This code path loads, checks, or forwards OPENAI_API_KEY for the external image backend. It is legitimate credential handling, but it exposes a sensitive secret to runtime code and API configuration.

Élevé

cli/image2ppt/runtime/image_gen.py:449

Generic API/secret keys

def _ensure_api_key(dry_run: bool) -> None:

This code path loads, checks, or forwards OPENAI_API_KEY for the external image backend. It is legitimate credential handling, but it exposes a sensitive secret to runtime code and API configuration.

Élevé

cli/image2ppt/runtime/image_gen.py:450

Generic API/secret keys

if os.getenv("OPENAI_API_KEY"):

This code path loads, checks, or forwards OPENAI_API_KEY for the external image backend. It is legitimate credential handling, but it exposes a sensitive secret to runtime code and API configuration.

Élevé

cli/image2ppt/runtime/image_gen.py:652

Generic API/secret keys

api_key=os.getenv("OPENAI_API_KEY"),

This code path loads, checks, or forwards OPENAI_API_KEY for the external image backend. It is legitimate credential handling, but it exposes a sensitive secret to runtime code and API configuration.

Élevé

cli/image2ppt/runtime/image_gen.py:905

Generic API/secret keys

_ensure_api_key(args.dry_run)

This code path loads, checks, or forwards OPENAI_API_KEY for the external image backend. It is legitimate credential handling, but it exposes a sensitive secret to runtime code and API configuration.

Élevé

cli/image2ppt/runtime/main.py:65

Generic API/secret keys

if args.api_key:

This code path loads, checks, or forwards OPENAI_API_KEY for the external image backend. It is legitimate credential handling, but it exposes a sensitive secret to runtime code and API configuration.

Élevé

cli/image2ppt/runtime/image_gen.py:46

Hidden file in home directory

DEFAULT_CODEX_AUTH_FILE = "~/.codex/auth.json"

This constant identifies the default local Codex OAuth credential file that the runtime later reads. Reusing a login token is sensitive even though outbound use is restricted to an official host.

Élevé

cli/image2ppt/runtime/runtime_env.py:19

Hidden file in home directory

DEFAULT_CODEX_AUTH_FILE = "~/.codex/auth.json"

This constant identifies the default local Codex OAuth credential file that the runtime later reads. Reusing a login token is sensitive even though outbound use is restricted to an official host.

Élevé

cli/image2ppt/runtime/formula_renderer.py:79

Python subprocess.run

result = subprocess.run(

The runtime executes a TeX engine on supplied formula content, and the CLI exposes an optional --shell-escape mode. Enabling that mode allows TeX content to invoke operating-system commands.

Élevé

cli/image2ppt/runtime/paddle_text_hints.py:78

Python HTTP libraries

jsonl = requests.get(status["resultUrl"]["jsonUrl"], timeout=60)

The code fetches a result URL supplied by the OCR response without validating its host or redirect chain. A compromised service response could direct the client to an unintended network target.

Moyen

cli/image2ppt/runtime/image_gen.py:46

Hidden file access

DEFAULT_CODEX_AUTH_FILE = "~/.codex/auth.json"

This constant identifies the default local Codex OAuth credential file that the runtime later reads. Reusing a login token is sensitive even though outbound use is restricted to an official host.

Moyen

cli/image2ppt/runtime/runtime_env.py:19

Hidden file access

DEFAULT_CODEX_AUTH_FILE = "~/.codex/auth.json"

This constant identifies the default local Codex OAuth credential file that the runtime later reads. Reusing a login token is sensitive even though outbound use is restricted to an official host.

Moyen

cli/image2ppt/runtime/runtime_env.py:94

Python file write/append

with os.fdopen(fd, "w", encoding="utf-8") as handle:

This write persists configuration values that may include API keys and OCR tokens in YAML. Owner-only permissions reduce exposure, but plaintext secret storage remains a credential risk.

Moyen

cli/image2ppt/runtime/image_gen.py:290

HTTP client library

def _open_codex_request(req: request.Request, timeout: int):

This function opens outbound Codex image requests. The destination is allowlisted and redirects are blocked, but task data and credentials cross a network boundary.

Moyen

cli/image2ppt/runtime/image_gen.py:380

HTTP client library

with _open_codex_request(req, timeout) as resp:

This is the outbound request that sends the image-generation body and bearer authorization to the official ChatGPT endpoint. Host validation reduces credential exfiltration risk.

Moyen

cli/image2ppt/runtime/paddle_text_hints.py:54

Python HTTP libraries

response = requests.post(

The code uploads a user slide or PDF and an authorization token to the PaddleOCR cloud endpoint. This is intentional but exposes document content to an external service.

Faible

cli/image2ppt/runtime/image_gen.py:163

getenv function call

if key not in ENV_FIELDS or os.getenv(key):