📦

pptx

Name: pptx
Author: ZhanlinCui

Content revision r1 Safe ⚙️ External commands🔑 Env variables🌐 Network access📁 Filesystem access

Create and Edit PowerPoint Decks

PowerPoint work often needs precise layout checks, template reuse, and XML-level repairs. This skill gives Claude, Codex, and Claude Code practical workflows for PPTX creation and editing.

Supports: Claude Codex Code(CC)

📊 75 Adequate

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "pptx" from https://skillstore.io/skills/zhanlincui-pptx.md and its manifest at https://skillstore.io/api/skills/zhanlincui-pptx/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/zhanlincui-pptx.md Signed manifest GET /api/skills/zhanlincui-pptx/manifest Signed lockfile GET /api/skills/zhanlincui-pptx/lockfile

Test it

Using "pptx". Create a short investor update deck from a project brief.

Expected outcome:

A PPTX file with title, market context, traction, roadmap, and next steps slides.
A thumbnail grid used to verify spacing, readability, and visual hierarchy.
A concise note describing design choices and any remaining manual checks.

Using "pptx". Use a branded template to make a customer proposal.

Expected outcome:

A template inventory that maps slide indices to layout purposes.
A revised proposal deck using selected template slides in the requested order.
A validation summary covering text replacement and layout checks.

Using "pptx". Fix a PPTX where one slide relationship is broken.

Expected outcome:

An unpacked OOXML inspection summary identifying the broken relationship.
A repaired PPTX that passes the included validation workflow.

Security Audit

Safe

v4 • 7/8/2026 Open versioned report

Most static findings are false positives from Markdown examples, JavaScript template literals, and OOXML namespace URIs. Confirmed risks include unsafe Office ZIP extraction, external converters processing user-provided files, and sudo dependency commands. No prompt injection or data-exfiltration intent was found.

Files scanned

26,473

Lines analyzed

Review items

False positives ignored

Capability review items (17)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

High

ooxml/scripts/pack.py:103

Python subprocess.run

result = subprocess.run(

The subprocess call runs a fixed local converter on user-provided presentation or PDF content. There is no shell injection, but external parsing of untrusted documents is a real execution-surface risk.

High

ooxml/scripts/unpack.py:17

Archive extract all (zip slip risk)

zipfile.ZipFile(input_file).extractall(output_path)

extractall is called on an Office ZIP archive without validating member paths first. A malicious archive can attempt path traversal or unexpected file writes.

High

ooxml/scripts/validation/base.py:891

Archive extract all (zip slip risk)

zip_ref.extractall(temp_path)

extractall is called on an Office ZIP archive without validating member paths first. A malicious archive can attempt path traversal or unexpected file writes.

High

ooxml/scripts/validation/docx.py:201

Archive extract all (zip slip risk)

zip_ref.extractall(temp_dir)

extractall is called on an Office ZIP archive without validating member paths first. A malicious archive can attempt path traversal or unexpected file writes.

High

ooxml/scripts/validation/redlining.py:70

Archive extract all (zip slip risk)

zip_ref.extractall(temp_path)

extractall is called on an Office ZIP archive without validating member paths first. A malicious archive can attempt path traversal or unexpected file writes.

High

scripts/thumbnail.py:219

Python subprocess.run

result = subprocess.run(

High

scripts/thumbnail.py:237

Python subprocess.run

result = subprocess.run(

High

SKILL.md:482

sudo privilege escalation

- **LibreOffice**: `sudo apt-get install libreoffice` (for PDF conversion)

The dependency instructions tell an agent to run sudo apt-get. If followed automatically, this requests elevated privileges and modifies system packages.

High

SKILL.md:483

sudo privilege escalation

- **Poppler**: `sudo apt-get install poppler-utils` (for pdftoppm to convert PDF to images)

The dependency instructions tell an agent to run sudo apt-get. If followed automatically, this requests elevated privileges and modifies system packages.

Medium

ooxml/scripts/unpack.py:7

Python archive libraries

import zipfile