技能 skywork-ppt
📦
skywork-ppt
內容修訂 r1 高風險 🌐 網路存取🔑 環境變數📁 檔案系統存取⚙️ 外部命令
建立 Skywork PowerPoint 簡報
從原始主題、檔案或範本建立精緻簡報，可能需要許多手動步驟。此技能會透過 Skywork 工作流程，自動化 PPTX 生成、範本仿製、編輯與本機投影片操作。
支援: Claude Codex Code(CC)
安裝前請停止並請求確認。
請審查安裝計畫，並在變更檔案前取得使用者明確同意。
使用我的智慧代理安裝
將此請求複製給你的智慧代理，其中包含權威 Skill 頁面和清單。
智能體請求
Review the Skillstore skill "skywork-ppt" from https://skillstore.io/skills/skyworkai-skywork-ppt.md and its manifest at https://skillstore.io/api/skills/skyworkai-skywork-ppt/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.你的智慧代理仍應顯示其計畫，並依安全政策請求必要確認。
Agent 可讀資源
當 AI Agent、爬蟲或腳本需要乾淨脈絡、而不是讀取完整頁面時，請使用這些連結。
測試它
正在使用「skywork-ppt」。 建立一份 6 張投影片的英文簡報，主題是客服支援自動化，用於領導層會議。
預期結果:
此技能會回傳生成的 PPTX 路徑、下載連結、簡報標題，以及簡潔的逐張投影片說明。
正在使用「skywork-ppt」。 使用我的本機範本，製作一份新的產品發表簡報。
預期結果:
此技能會上傳範本、以相似版面配置生成新的 PPTX，並回報使用了哪個範本檔案。
正在使用「skywork-ppt」。 從這個 PPTX 刪除第 3 和第 7 張投影片，並儲存一份精簡副本。
預期結果:
此技能會執行本機投影片操作，並回報已儲存的 PPTX 路徑與完成後的投影片數量變更。
安全審計
高風險v4 • 2026/7/7 開啟版本化報告
The skill has legitimate presentation-generation functionality, but it depends heavily on external Skywork APIs, local file uploads, token handling, and command execution. I confirmed the high-risk token cache, browser-launch subprocesses, document upload paths, and several filesystem risks, while dismissing Markdown backtick and placeholder URL false positives. No prompt injection attempt was found in the reviewed files.
12
已掃描檔案
2,255
分析行數
95
複核項目
0
已忽略的誤報
已確認的安全問題 (6)
高
workflow_generate.md:7-10scripts/parse_file.py:41-42workflow_imitate.md:82-89scripts/upload_files.py:68-80
Third-Party Upload of Local Presentation Inputs
The workflows and scripts upload user-provided documents, templates, or PPTX files to Skywork services for parsing, storage, or generation. This is expected functionality, but it can disclose sensitive local files if the user has not given explicit approval.
The workflow text explicitly tells the agent to upload reference files or templates, and the scripts read file bytes before POSTing to Skywork endpoints.
高
Persistent Token Cache Without Permission Hardening
The authentication flow caches Skywork token data in ~/.skywork_token and reloads it later. The write path does not apply restrictive permissions or use an operating system credential store.
The token cache path and JSON write are direct, and I found no chmod, keychain, or permission check around the stored credential.
高
Query-Controlled Search Result File Path
The web search script builds an output filename from the raw query string before writing search results. A crafted query containing path separators or an absolute path can influence where the result file is written.
The query comes from CLI arguments, is concatenated into the filename, and is passed to open() without sanitization or basename normalization.
低
System reconnaissance
3. No valid token → opens browser for login, polls until complete, saves token
The instructions state that the login flow opens a browser, polls for completion, and saves a token. This is security relevant authentication behavior.
低
System reconnaissance
**This skill requires Python 3 (>=3.8). Run the following before any script to locate a valid Python
The instructions enumerate candidate Python binaries with command -v and test versions. This is limited host inspection for dependency setup.
低
System reconnaissance
After writing the reference report, save it to a local temp file to avoid shell encoding issues:
The workflow instructs saving a reference report to a temp file. It is not reconnaissance, but it is still filesystem behavior with potentially sensitive content.
能力複核項目 (95)
這些是真實的本機能力，對此技能而言可能是預期行為，因此需要複核，但不會按已確認的惡意行為計分。
高
Python subprocess.Popen
subprocess.Popen(["open", url], start_new_session=True,
The authentication flow spawns OS commands to open a browser, and the Windows branch uses shell=True. The commands are fixed, but launching external processes from a skill is a real execution risk.
高
Python subprocess.Popen
subprocess.Popen(["start", url], shell=True, start_new_session=True,
The authentication flow spawns OS commands to open a browser, and the Windows branch uses shell=True. The commands are fixed, but launching external processes from a skill is a real execution risk.
高
Python subprocess.Popen
subprocess.Popen(["xdg-open", url], start_new_session=True,
The authentication flow spawns OS commands to open a browser, and the Windows branch uses shell=True. The commands are fixed, but launching external processes from a skill is a real execution risk.
高
Hidden file in home directory
Token is stored in user home directory as ~/.skywork_token (JSON format).
The skill stores or documents a persistent Skywork token in ~/.skywork_token in the user home directory. A cached bearer token can be reused by other local processes or users if permissions are weak.
高
Hidden file in home directory
TOKEN_FILE = os.path.expanduser("~/.skywork_token")
The skill stores or documents a persistent Skywork token in ~/.skywork_token in the user home directory. A cached bearer token can be reused by other local processes or users if permissions are weak.
高
Hidden file access
Token is stored in user home directory as ~/.skywork_token (JSON format).
The skill stores or documents a persistent Skywork token in ~/.skywork_token in the user home directory. A cached bearer token can be reused by other local processes or users if permissions are weak.
高
Hidden file access
TOKEN_FILE = os.path.expanduser("~/.skywork_token")
The skill stores or documents a persistent Skywork token in ~/.skywork_token in the user home directory. A cached bearer token can be reused by other local processes or users if permissions are weak.
高
Python file write/append
with open(TOKEN_FILE, "w", encoding="utf-8") as f:
The script writes token data to the persistent ~/.skywork_token cache. The code does not set restrictive file permissions around the credential write.
高
Python HTTP libraries
import urllib.request
The script reads local files and uploads their full bytes to Skywork object storage through the gateway. This is a direct exfiltration surface for sensitive files if invoked without clear consent.
高
Python HTTP libraries
req = urllib.request.Request(
The script reads local files and uploads their full bytes to Skywork object storage through the gateway. This is a direct exfiltration surface for sensitive files if invoked without clear consent.
高
Python HTTP libraries
with urllib.request.urlopen(req, timeout=60) as resp:
The script reads local files and uploads their full bytes to Skywork object storage through the gateway. This is a direct exfiltration surface for sensitive files if invoked without clear consent.
高
Python file write/append
with open(out_path, "w", encoding="utf-8") as f:
The script writes search results to a filename derived from the raw query string. A crafted query can influence the output path and leave sensitive search context on disk.
高
Hidden file in home directory
2. Cached token file `~/.skywork_token` → validate via API, if valid, use it
The instructions explicitly use a cached ~/.skywork_token credential file. Persistent hidden-token storage is a real credential exposure risk.
高
Hidden file access
2. Cached token file `~/.skywork_token` → validate via API, if valid, use it
The instructions explicitly use a cached ~/.skywork_token credential file. Persistent hidden-token storage is a real credential exposure risk.
中
Python HTTP libraries
from urllib.request import Request, urlopen
The script uploads user-provided files to the Skywork Office parse service and streams results back. This is a real external data transfer risk for sensitive documents.
中
Hardcoded URL
SKYWORK_OFFICE_URL - Base URL (default: https://api-tools.skywork.ai/theme-gateway)
The script uploads user-provided files to the Skywork Office parse service and streams results back. This is a real external data transfer risk for sensitive documents.
中
Python file write/append
with open(args.output, "w", encoding="utf-8") as f:
The optional output path writes parsed document content to disk. A user-controlled path can overwrite writable files or leave sensitive extracted text behind.
中
Python HTTP libraries
import urllib.request
The script sends prompts, references, uploaded file metadata, and tokens to Skywork generation or edit APIs, then downloads the PPTX result. This is intentional but security relevant network transfer.
中
Python HTTP libraries
req = urllib.request.Request(
The script sends prompts, references, uploaded file metadata, and tokens to Skywork generation or edit APIs, then downloads the PPTX result. This is intentional but security relevant network transfer.
中
Python HTTP libraries
with urllib.request.urlopen(req, timeout=600) as resp:
The script sends prompts, references, uploaded file metadata, and tokens to Skywork generation or edit APIs, then downloads the PPTX result. This is intentional but security relevant network transfer.
中
Python HTTP libraries
req2 = urllib.request.Request(download_url, method="GET")
The script sends prompts, references, uploaded file metadata, and tokens to Skywork generation or edit APIs, then downloads the PPTX result. This is intentional but security relevant network transfer.
中
Python HTTP libraries
with urllib.request.urlopen(req2, timeout=120) as r:
The script sends prompts, references, uploaded file metadata, and tokens to Skywork generation or edit APIs, then downloads the PPTX result. This is intentional but security relevant network transfer.
中
Temp directory access
log_file = f"/tmp/ppt_run_{session_id}.log" if args.log_path == "" else args.log_path
The script creates or appends log files and writes the generated PPTX to a caller-controlled output path. This can expose content in logs or overwrite writable files if paths are unsafe.
中
Python file write/append
with open(log_file, "a", encoding="utf-8") as f:
The script creates or appends log files and writes the generated PPTX to a caller-controlled output path. This can expose content in logs or overwrite writable files if paths are unsafe.
中
Python file write/append
open(log_file, "w").close() # clear previous run
The script creates or appends log files and writes the generated PPTX to a caller-controlled output path. This can expose content in logs or overwrite writable files if paths are unsafe.
中
Python file write/append
with open(out_abs, "wb") as f:
The script creates or appends log files and writes the generated PPTX to a caller-controlled output path. This can expose content in logs or overwrite writable files if paths are unsafe.
中
Hardcoded URL
API_BASE = os.environ.get("SKYWORK_API_BASE", "https://api.skywork.ai")
The authentication module contacts Skywork login and token validation endpoints. This sends authentication state to an external service and is security relevant.
中
Hardcoded URL
LOGIN_BASE_URL = os.environ.get("SKYWORK_WEB_BASE", "https://skywork.ai")
The authentication module contacts Skywork login and token validation endpoints. This sends authentication state to an external service and is security relevant.
中
Python environment access
API_BASE = os.environ.get("SKYWORK_API_BASE", "https://api.skywork.ai")
The API and web login bases are environment-overridable. This can redirect authentication traffic if the environment is not trusted.
中
Python environment access
LOGIN_BASE_URL = os.environ.get("SKYWORK_WEB_BASE", "https://skywork.ai")
The API and web login bases are environment-overridable. This can redirect authentication traffic if the environment is not trusted.
中
Python environment access
env_token = os.environ.get("SKYBOT_TOKEN", "")
The script reads SKYBOT_TOKEN from the environment and uses it as an authentication token. Environment-sourced credentials are sensitive and later authorize network calls.
中
Python environment access
env_token = os.environ.get("SKYBOT_TOKEN", "")
The script reads SKYBOT_TOKEN from the environment and uses it as an authentication token. Environment-sourced credentials are sensitive and later authorize network calls.
中
Python HTTP libraries
import urllib.request
The script sends search queries to a Skywork web search API with an authentication token. Queries can contain sensitive project or business context.
中
Python HTTP libraries
req = urllib.request.Request(
The script sends search queries to a Skywork web search API with an authentication token. Queries can contain sensitive project or business context.
中
Python HTTP libraries
with urllib.request.urlopen(req, timeout=30) as resp:
The script sends search queries to a Skywork web search API with an authentication token. Queries can contain sensitive project or business context.
中
Temp file creation
import tempfile
The script creates a temporary directory for search result files. Temporary storage is legitimate but can retain sensitive query results after the run.
中
Temp file creation
out_dir = tempfile.mkdtemp(prefix="web_search_")
The script creates a temporary directory for search result files. Temporary storage is legitimate but can retain sensitive query results after the run.
中
Ruby/shell backtick execution
```bash
The static pattern is present, and I did not find enough context to dismiss it safely. Keeping the finding confirmed with low confidence.
中
Ruby/shell backtick execution
```
The static pattern is present, and I did not find enough context to dismiss it safely. Keeping the finding confirmed with low confidence.
中
Ruby/shell backtick execution
1. Environment variable `SKYBOT_TOKEN` → if set, use directly
The static pattern is present, and I did not find enough context to dismiss it safely. Keeping the finding confirmed with low confidence.
中
Ruby/shell backtick execution
2. Cached token file `~/.skywork_token` → validate via API, if valid, use it
The static pattern is present, and I did not find enough context to dismiss it safely. Keeping the finding confirmed with low confidence.
中
Ruby/shell backtick execution
**IMPORTANT - Login URL handling**: If script output contains a line starting with `[LOGIN_URL]`, yo
The static pattern is present, and I did not find enough context to dismiss it safely. Keeping the finding confirmed with low confidence.
中
Ruby/shell backtick execution
```bash
The static pattern is present, and I did not find enough context to dismiss it safely. Keeping the finding confirmed with low confidence.
中
Ruby/shell backtick execution
```
The static pattern is present, and I did not find enough context to dismiss it safely. Keeping the finding confirmed with low confidence.
中
Ruby/shell backtick execution
> After this check, replace `python` with the discovered `$PYTHON_CMD` (e.g. `python3`) in all subse
The static pattern is present, and I did not find enough context to dismiss it safely. Keeping the finding confirmed with low confidence.
中
Ruby/shell backtick execution
0. **REQUIRED FIRST STEP** — Read [workflow_generate.md](workflow_generate.md) NOW, before taking an
The static pattern is present, and I did not find enough context to dismiss it safely. Keeping the finding confirmed with low confidence.
中
Ruby/shell backtick execution
1. **Environment check** — run the check above to get `$PYTHON_CMD`.
The static pattern is present, and I did not find enough context to dismiss it safely. Keeping the finding confirmed with low confidence.
中
Ruby/shell backtick execution
2. **Upload reference files** (if the user provides local files as content source) — parse the file
The static pattern is present, and I did not find enough context to dismiss it safely. Keeping the finding confirmed with low confidence.
中
Ruby/shell backtick execution
3. **Web search** (required if no relevant content is already in the conversation) — call web_search
The static pattern is present, and I did not find enough context to dismiss it safely. Keeping the finding confirmed with low confidence.
中
Ruby/shell backtick execution
> **Important**: set exec tool `yieldMs` to `600000` (10 minutes).
The static pattern is present, and I did not find enough context to dismiss it safely. Keeping the finding confirmed with low confidence.
中
Ruby/shell backtick execution
5. **Deliver** — provide the absolute `.pptx` path and the download URL.
The static pattern is present, and I did not find enough context to dismiss it safely. Keeping the finding confirmed with low confidence.
中
Ruby/shell backtick execution
1. **Environment check** — run the check above to get `$PYTHON_CMD`.
The static pattern is present, and I did not find enough context to dismiss it safely. Keeping the finding confirmed with low confidence.
中
Ruby/shell backtick execution
2. **Locate the template** — extract the absolute path of the local `.pptx` from the user's message;
The static pattern is present, and I did not find enough context to dismiss it safely. Keeping the finding confirmed with low confidence.
中
Ruby/shell backtick execution
3. **Upload the template** — upload it and extract `TEMPLATE_URL` from the output.
The static pattern is present, and I did not find enough context to dismiss it safely. Keeping the finding confirmed with low confidence.
中
Ruby/shell backtick execution
4. **Upload reference files** (if the user provides additional local files as content source) — pars
The static pattern is present, and I did not find enough context to dismiss it safely. Keeping the finding confirmed with low confidence.
中
Ruby/shell backtick execution
5. **Web search** (required if no relevant content is already in the conversation) — call web_search
The static pattern is present, and I did not find enough context to dismiss it safely. Keeping the finding confirmed with low confidence.
中
Ruby/shell backtick execution
> **Important**: set exec tool `yieldMs` to `600000` (10 minutes).
The static pattern is present, and I did not find enough context to dismiss it safely. Keeping the finding confirmed with low confidence.
中
Ruby/shell backtick execution
7. **Deliver** — provide the absolute `.pptx` path, the download URL, and the template filename used
The static pattern is present, and I did not find enough context to dismiss it safely. Keeping the finding confirmed with low confidence.
中
Ruby/shell backtick execution
1. **Environment check** — run the check above to get `$PYTHON_CMD`.
The static pattern is present, and I did not find enough context to dismiss it safely. Keeping the finding confirmed with low confidence.
中
Ruby/shell backtick execution
3. **Run the script** with `--pptx-url`:
The static pattern is present, and I did not find enough context to dismiss it safely. Keeping the finding confirmed with low confidence.
中
Ruby/shell backtick execution
```bash
The static pattern is present, and I did not find enough context to dismiss it safely. Keeping the finding confirmed with low confidence.
中
Ruby/shell backtick execution
```
The static pattern is present, and I did not find enough context to dismiss it safely. Keeping the finding confirmed with low confidence.
中
Ruby/shell backtick execution
> **Important**: set exec tool `yieldMs` to `600000` (10 minutes).
The static pattern is present, and I did not find enough context to dismiss it safely. Keeping the finding confirmed with low confidence.
中
Ruby/shell backtick execution
```bash
The static pattern is present, and I did not find enough context to dismiss it safely. Keeping the finding confirmed with low confidence.
中
Ruby/shell backtick execution
```
The static pattern is present, and I did not find enough context to dismiss it safely. Keeping the finding confirmed with low confidence.
中
Ruby/shell backtick execution
- **Insufficient benefit**: When calling scripts (generate, imitate, or edit), the script or log may
The static pattern is present, and I did not find enough context to dismiss it safely. Keeping the finding confirmed with low confidence.
中
Ruby/shell backtick execution
- **Format**: One short sentence in the user's language + a link like `[Upgrade now →](url)` or the
The static pattern is present, and I did not find enough context to dismiss it safely. Keeping the finding confirmed with low confidence.
中
Ruby/shell backtick execution
- **URL**: Extract the upgrade URL from the log/script output (e.g. the `at https://...` part).
The static pattern is present, and I did not find enough context to dismiss it safely. Keeping the finding confirmed with low confidence.
中
Ruby/shell backtick execution
- **Python 3.8+** (required) — `python3` / `python` must be on PATH
The static pattern is present, and I did not find enough context to dismiss it safely. Keeping the finding confirmed with low confidence.
中
Shell command substitution
echo "Found Python: $PYTHON_CMD ($($PYTHON_CMD --version))"
The static pattern is present, and I did not find enough context to dismiss it safely. Keeping the finding confirmed with low confidence.
中
Template literal with command substitution
```bash
The static pattern is present, and I did not find enough context to dismiss it safely. Keeping the finding confirmed with low confidence.
中
Shell command substitution
PPT_LOG=/tmp/ppt_$(date +%s).log
The workflow instructs shell command substitution while running and monitoring background PPT jobs. It is expected process control, but it requires local command execution.
中
Shell command substitution
PPT_PID=$(grep '^\[PID\]' "$PPT_LOG" | tail -1 | awk '{print $2}')
The workflow instructs shell command substitution while running and monitoring background PPT jobs. It is expected process control, but it requires local command execution.
中
Temp directory access
PPT_LOG=/tmp/ppt_$(date +%s).log
The workflow creates a predictable timestamp-based log file under /tmp. Logs may contain PPT progress or error details and can persist after execution.
中
Shell command substitution
PPT_LOG=/tmp/ppt_$(date +%s).log
The workflow instructs shell command substitution while running and monitoring background PPT jobs. It is expected process control, but it requires local command execution.
中
Shell command substitution
PPT_PID=$(grep '^\[PID\]' "$PPT_LOG" | tail -1 | awk '{print $2}')
The workflow instructs shell command substitution while running and monitoring background PPT jobs. It is expected process control, but it requires local command execution.
中
Temp directory access
cat > /tmp/ppt_reference.md << 'REFERENCE_EOF'
The workflow writes reference material and logs under /tmp using predictable names. These files can contain sensitive source content or generation details.
中
Temp directory access
- **--reference-file** (optional): Pass the path to the temp file written at the end of Step 2 (e.g.
The workflow writes reference material and logs under /tmp using predictable names. These files can contain sensitive source content or generation details.
中
Temp directory access
PPT_LOG=/tmp/ppt_$(date +%s).log
The workflow writes reference material and logs under /tmp using predictable names. These files can contain sensitive source content or generation details.
中
Temp directory access
--reference-file /tmp/ppt_reference.md \
The workflow writes reference material and logs under /tmp using predictable names. These files can contain sensitive source content or generation details.
中
Shell command substitution
PPT_LOG=/tmp/ppt_$(date +%s).log
The workflow instructs shell command substitution while running and monitoring background PPT jobs. It is expected process control, but it requires local command execution.
中
Shell command substitution
PPT_PID=$(grep '^\[PID\]' "$PPT_LOG" | tail -1 | awk '{print $2}')
The workflow instructs shell command substitution while running and monitoring background PPT jobs. It is expected process control, but it requires local command execution.
中
Temp directory access
cat > /tmp/ppt_reference.md << 'REFERENCE_EOF'
The workflow writes reference material, uses /tmp paths, or documents template paths. Temporary files and local paths can expose sensitive presentation content.
中
Temp directory access
- **--reference-file** (optional): Path to the temp file written at the end of Step 3 (e.g. `/tmp/pp
The workflow writes reference material, uses /tmp paths, or documents template paths. Temporary files and local paths can expose sensitive presentation content.
中
Temp directory access
PPT_LOG=/tmp/ppt_$(date +%s).log
The workflow writes reference material, uses /tmp paths, or documents template paths. Temporary files and local paths can expose sensitive presentation content.
中
Temp directory access
--reference-file /tmp/ppt_reference.md \
The workflow writes reference material, uses /tmp paths, or documents template paths. Temporary files and local paths can expose sensitive presentation content.
中
Temp directory access
| Use this template to make a PPT on AI trends — template at `/tmp/style.pptx` | ✅ Imitate |
The workflow writes reference material, uses /tmp paths, or documents template paths. Temporary files and local paths can expose sensitive presentation content.
低
Hardcoded URL
SKYWORK_AUTH_API_BASE = "https://api.skywork.ai"
This config defines external Skywork API endpoints that the skill uses for authentication, parsing, upload, search, and PPT generation. Network destinations are expected but still require disclosure and trust in a third-party service.
低
Hardcoded URL
SKYWORK_WEB_BASE = "https://skywork.ai"
This config defines external Skywork API endpoints that the skill uses for authentication, parsing, upload, search, and PPT generation. Network destinations are expected but still require disclosure and trust in a third-party service.
低
Hardcoded URL
SKYWORK_OFFICE_URL = os.environ.get("SKYWORK_OFFICE_URL", "https://api.skywork.ai/skywork-office-rou
This config defines external Skywork API endpoints that the skill uses for authentication, parsing, upload, search, and PPT generation. Network destinations are expected but still require disclosure and trust in a third-party service.
低
Hardcoded URL
SKYWORK_GATEWAY_URL = os.environ.get("SKYWORK_GATEWAY_URL", "https://api-tools.skywork.ai/theme-gate
This config defines external Skywork API endpoints that the skill uses for authentication, parsing, upload, search, and PPT generation. Network destinations are expected but still require disclosure and trust in a third-party service.
低
Python environment access
SKYWORK_OFFICE_URL = os.environ.get("SKYWORK_OFFICE_URL", "https://api.skywork.ai/skywork-office-rou
The service base URL can be overridden from the environment. That is useful for deployment but can redirect uploads or tokens if the execution environment is compromised.
低
Python environment access
SKYWORK_GATEWAY_URL = os.environ.get("SKYWORK_GATEWAY_URL", "https://api-tools.skywork.ai/theme-gate
The service base URL can be overridden from the environment. That is useful for deployment but can redirect uploads or tokens if the execution environment is compromised.
低
Python environment access
payload["source_platform"] = "skyclaw" if os.environ.get("POD_TYPE", "") == "skyclaw" else ""
The script reads POD_TYPE from the environment to set source_platform. The value is low sensitivity but confirms environment-dependent behavior.
低
Python environment access
payload = {"query": query, "source_platform": "skyclaw" if os.environ.get("POD_TYPE", "") == "skycla
The script reads POD_TYPE from the environment to set source_platform. This is low sensitivity but confirms environment-dependent behavior.
風險因素
🌐 網路存取 (34)
scripts/config.py:9 scripts/config.py:12 scripts/config.py:16 scripts/config.py:19 scripts/local_pptx_ops.py:91 scripts/parse_file.py:24 scripts/parse_file.py:12 scripts/run_ppt_write.py:16 scripts/run_ppt_write.py:296 scripts/run_ppt_write.py:305 scripts/run_ppt_write.py:328 scripts/run_ppt_write.py:329 scripts/run_ppt_write.py:231 scripts/skywork_auth.py:41 scripts/skywork_auth.py:42 scripts/upload_files.py:15 scripts/upload_files.py:81 scripts/upload_files.py:91 scripts/upload_files.py:106 scripts/web_search.py:14 scripts/web_search.py:24 scripts/web_search.py:31 SKILL.md:61 SKILL.md:115 SKILL.md:156 workflow_edit.md:49 workflow_generate.md:21 workflow_generate.md:27 workflow_generate.md:28 workflow_generate.md:133 workflow_imitate.md:46 workflow_imitate.md:52 workflow_imitate.md:53 workflow_imitate.md:117
🔑 環境變數 (8)
📁 檔案系統存取 (33)
scripts/parse_file.py:157 scripts/run_ppt_write.py:244 scripts/run_ppt_write.py:34 scripts/run_ppt_write.py:245 scripts/run_ppt_write.py:330 scripts/skywork_auth.py:6 scripts/skywork_auth.py:44 scripts/skywork_auth.py:6 scripts/skywork_auth.py:44 scripts/skywork_auth.py:172 scripts/upload_files.py:106 scripts/web_search.py:13 scripts/web_search.py:60 scripts/web_search.py:71 SKILL.md:28 SKILL.md:28 SKILL.md:53 workflow_edit.md:52 workflow_edit.md:73 workflow_edit.md:45 workflow_generate.md:136 workflow_generate.md:156 workflow_generate.md:87 workflow_generate.md:117 workflow_generate.md:128 workflow_generate.md:132 workflow_imitate.md:120 workflow_imitate.md:141 workflow_imitate.md:74 workflow_imitate.md:100 workflow_imitate.md:111 workflow_imitate.md:116 workflow_imitate.md:187
⚙️ 外部命令 (43)
scripts/skywork_auth.py:87 scripts/skywork_auth.py:90 scripts/skywork_auth.py:93 SKILL.md:21-24 SKILL.md:24-27 SKILL.md:27-28 SKILL.md:28-31 SKILL.md:31-50 SKILL.md:50-69 SKILL.md:69-71 SKILL.md:71 SKILL.md:78-79 SKILL.md:79-80 SKILL.md:80 SKILL.md:81-83 SKILL.md:83 SKILL.md:84-92 SKILL.md:92-93 SKILL.md:93-94 SKILL.md:94-95 SKILL.md:95 SKILL.md:96-98 SKILL.md:98 SKILL.md:99-109 SKILL.md:109-111 SKILL.md:111-112 SKILL.md:112-117 SKILL.md:117-118 SKILL.md:118 SKILL.md:125-140 SKILL.md:140-148 SKILL.md:148-155 SKILL.md:155-156 SKILL.md:156-162 SKILL.md:162 SKILL.md:65 SKILL.md:50-69 workflow_edit.md:45 workflow_edit.md:71 workflow_generate.md:128 workflow_generate.md:154 workflow_imitate.md:111 workflow_imitate.md:139
偵測到的模式
System reconnaissance×3
審計單位: codex 檢視審計紀錄 →
分享與引用此報告
分享版本化評估報告、中性徽章、嵌入卡片與引用。Skillstore 只報告證據，不判斷該 Skill 是否安全。
複製報告連結
https://skillstore.io/skills/skyworkai-skywork-ppt/audits/4?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown 徽章
[](https://skillstore.io/skills/skyworkai-skywork-ppt?utm_source=security_passport_badge)HTML 徽章
<a href="https://skillstore.io/skills/skyworkai-skywork-ppt?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/skyworkai-skywork-ppt/security.svg" alt="Skillstore security assessment" loading="lazy"></a>嵌入卡片
<iframe src="https://skillstore.io/embed/skills/skyworkai-skywork-ppt.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>學術引用 (APA · BibTeX · CFF)
APA 引用
SkyworkAI. (2026). skywork-ppt security audit report (audit version 4) [Author version unspecified]. Skillstore. https://skillstore.io/skills/skyworkai-skywork-ppt/audits/4BibTeX 引用
@techreport{skyworkai-skyworkai-skywork-ppt-2026,
author = {SkyworkAI},
title = {skywork-ppt security audit report (audit version 4)},
institution = {Skillstore},
year = {2026},
number = {4},
url = {https://skillstore.io/skills/skyworkai-skywork-ppt/audits/4},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "skywork-ppt security audit report (audit version 4)"
version: "unspecified"
type: report
authors:
- name: "SkyworkAI"
date-released: "2026-07-07"
url: "https://skillstore.io/skills/skyworkai-skywork-ppt/audits/4"
identifiers:
- type: other
value: "skillstore:skyworkai-skywork-ppt:audit:4"
description: "Skillstore immutable audit report identifier"
Skillstore 評分
評分依據 證據置信度: 中 45
架構
85
可維護性
87
內容
69
社群
83
規範符合度
你可以打造什麼
從主題建立簡報匯報
將主題、受眾、投影片數量與支援筆記轉換成生成的 PPTX，並附上進度記錄與下載連結。
重用公司簡報風格
上傳 PPTX 範本，並建立遵循該範本版面配置與視覺結構的新簡報。
整理現有投影片檔案
在本機檢查、刪除、重新排序、擷取或合併投影片，無需將簡報傳送到生成後端。
試試這些提示
生成簡單簡報
建立一份英文 PPTX，主題是再生能源趨勢，面向一般商業受眾。使用 8 張投影片，採用乾淨專業的風格。
根據參考檔案生成
根據附加的市場報告建立一份 10 張投影片的投資人簡報。精確保留關鍵數字、日期與公司名稱。
仿製範本風格
使用此本機路徑的 PPTX 範本，建立一份關於我們 2026 產品路線圖的 12 張投影片簡報。符合該範本結構。
編輯並重新組織簡報
編輯此 PPTX URL，在第 2 張投影片後新增一張新的高階主管摘要，然後建立一份移除第 4 和第 5 張投影片的本機副本。
最佳實務
- 在使用上傳、解析、編輯或範本仿製工作流程前，確認檔案是否包含機密資料。
- 在開始生成前，提供投影片數量、受眾、語言與風格需求。
- 當不需要後端生成時，針對簡單的刪除、重新排序、擷取或合併任務使用本機投影片操作。
避免
- 未經明確授權，請勿上傳受法規管制、秘密或客戶機密檔案。
- 未檢查來源日期前，請勿依賴生成式研究來處理具時效性的主張。
- 未審查 token 儲存與清理方式前，請勿在共用機器上執行驗證流程。
常見問題
此技能需要 Skywork 帳戶嗎？
是。生成、編輯、上傳、解析與搜尋工作流程需要 Skywork 驗證。
它只能處理本機 PPTX 檔案嗎？
刪除、重新排序、擷取、合併與基本檔案資訊任務可以。生成與 AI 編輯會使用外部服務。
我的檔案會被上傳嗎？
使用解析、範本仿製或以 URL 為基礎的編輯工作流程時，檔案會被上傳。本機投影片操作不需要後端上傳。
它可以生成哪些語言？
工作流程會將偵測到的使用者語言傳遞給後端，例如英文或中文。
它可以使用公司範本嗎？
可以。提供 PPTX 範本路徑，仿製工作流程會上傳該範本作為風格與版面配置參考。
安裝前我應該檢查什麼？
審查外部 API 呼叫、token 快取行為、瀏覽器啟動子程序，以及本機檔案上傳工作流程。
開發者詳細資訊
作者
SkyworkAI授權
MIT
Skillstore 修訂
r1
版本提示
作者未聲明版本。
引用
f93e9bb0daca99badb6a7e574b97737155d57cb3
維護新鮮度
2026/7/18
使用量
51 次下載 · 140 次瀏覽