技能 nature-image2ppt

📦

nature-image2ppt

Name: nature-image2ppt
Author: yuan1z0825

內容修訂 r1 高風險 🔑 環境變數⚙️ 外部命令🌐 網路存取📁 檔案系統存取⚡ 包含腳本

Rebuild Slide Images as Editable PowerPoint

Flat slide images are difficult to revise or reuse. This skill reconstructs them as editable PowerPoint objects and validates the rendered result.

支援: Claude Codex Code(CC)

⚠️ 38 差

Maintain this Skill? Claim it ⚠️ 38 差

安裝前請停止並請求確認。

請審查安裝計畫，並在變更檔案前取得使用者明確同意。

使用我的智慧代理安裝

將此請求複製給你的智慧代理，其中包含權威 Skill 頁面和清單。

智能體請求

Review the Skillstore skill "nature-image2ppt" from https://skillstore.io/skills/yuan1z0825-nature-image2ppt.md and its manifest at https://skillstore.io/api/skills/yuan1z0825-nature-image2ppt/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

你的智慧代理仍應顯示其計畫，並依安全政策請求必要確認。

Agent 可讀資源

當 AI Agent、爬蟲或腳本需要乾淨脈絡、而不是讀取完整頁面時，請使用這些連結。

Markdown 詳情 GET /skills/yuan1z0825-nature-image2ppt.md 已簽名 manifest GET /api/skills/yuan1z0825-nature-image2ppt/manifest 已簽名 lockfile GET /api/skills/yuan1z0825-nature-image2ppt/lockfile

測試它

正在使用「nature-image2ppt」。 A screenshot containing a title, three process cards, and connecting arrows.

預期結果:

An editable PowerPoint slide with native text boxes, cards, connectors, arrowheads, a preview, and completed quality evidence.

正在使用「nature-image2ppt」。 A scanned PDF with six lecture slides and mathematical formulas.

預期結果:

A six-slide PPTX with reconstructed text, rendered formula assets, page manifests, visual previews, and final validation results.

正在使用「nature-image2ppt」。 An image-only PPTX containing speaker notes and a complex knowledge graph.

預期結果:

A rebuilt deck with preserved notes, native graph nodes and connectors, bounded complex assets, and a report listing remaining bitmaps.

安全審計

高風險

v1 • 2026/8/19 開啟版本化報告

Most static matches are false positives from PowerPoint XML, Markdown backticks, defensive path tests, and fixed argument-list subprocess calls. Confirmed risks include credential access, external image and OCR transfers, plaintext secret configuration, and optional TeX shell escape. Semantic review also found automatic Codex token reuse, an unvalidated OCR result URL, and misleading cloud-consent language. Static review was capped at 400/784 representative findings; omitted static matches are unconfirmed, so automatic publishing stays disabled until manual review.

已掃描檔案

18,028

分析行數

複核項目

已忽略的誤報

已確認的安全問題 (3)

高

cli/image2ppt/runtime/image_gen.py:217-230 cli/image2ppt/runtime/image_gen.py:355-380

Automatic Reuse of Local Codex OAuth Credentials

The image backend automatically reads a local Codex access token when present and sends it with slide prompts or images. Host allowlisting and redirect blocking limit exfiltration, but per-use consent is not required.

The code directly reads access_token from the Codex auth file, adds it as a bearer header, and posts a body containing task data.

高

cli/image2ppt/runtime/paddle_text_hints.py:68-79

Unvalidated OCR Result URL Enables SSRF

The OCR client fetches a result URL supplied by the remote service without restricting its scheme, host, or redirects. A compromised response could make the client contact an unintended internal or external address.

The polling response controls status.resultUrl.jsonUrl, which is passed directly to requests.get without destination validation.

中

cli/image2ppt/runtime/deck_text_hints.py:107-117

Misleading Cloud OCR Consent Language

The runtime describes a third-party OCR quota as risk-free and asks users to configure a token. This language omits document-upload privacy risks and may weaken informed consent.

The message explicitly claims the service is risk-free with no extra cost while encouraging token setup before reconstruction.

能力複核項目 (35)

這些是真實的本機能力，對此技能而言可能是預期行為，因此需要複核，但不會按已確認的惡意行為計分。

高

cli/image2ppt/runtime/image_gen.py:48

Generic API/secret keys

ENV_FIELDS = ("OPENAI_API_KEY", "OPENAI_BASE_URL", "IMAGE2PPT_IMAGE_MODEL")

This code path loads, checks, or forwards OPENAI_API_KEY for the external image backend. It is legitimate credential handling, but it exposes a sensitive secret to runtime code and API configuration.

高

cli/image2ppt/runtime/image_gen.py:449

Generic API/secret keys

def _ensure_api_key(dry_run: bool) -> None:

This code path loads, checks, or forwards OPENAI_API_KEY for the external image backend. It is legitimate credential handling, but it exposes a sensitive secret to runtime code and API configuration.

高

cli/image2ppt/runtime/image_gen.py:450

Generic API/secret keys

if os.getenv("OPENAI_API_KEY"):

This code path loads, checks, or forwards OPENAI_API_KEY for the external image backend. It is legitimate credential handling, but it exposes a sensitive secret to runtime code and API configuration.

高

cli/image2ppt/runtime/image_gen.py:652

Generic API/secret keys

api_key=os.getenv("OPENAI_API_KEY"),

This code path loads, checks, or forwards OPENAI_API_KEY for the external image backend. It is legitimate credential handling, but it exposes a sensitive secret to runtime code and API configuration.

高

cli/image2ppt/runtime/image_gen.py:905

Generic API/secret keys

_ensure_api_key(args.dry_run)

This code path loads, checks, or forwards OPENAI_API_KEY for the external image backend. It is legitimate credential handling, but it exposes a sensitive secret to runtime code and API configuration.

高

cli/image2ppt/runtime/main.py:65

Generic API/secret keys

if args.api_key:

This code path loads, checks, or forwards OPENAI_API_KEY for the external image backend. It is legitimate credential handling, but it exposes a sensitive secret to runtime code and API configuration.

高

cli/image2ppt/runtime/image_gen.py:46

Hidden file in home directory

DEFAULT_CODEX_AUTH_FILE = "~/.codex/auth.json"

This constant identifies the default local Codex OAuth credential file that the runtime later reads. Reusing a login token is sensitive even though outbound use is restricted to an official host.

高

cli/image2ppt/runtime/runtime_env.py:19

Hidden file in home directory

DEFAULT_CODEX_AUTH_FILE = "~/.codex/auth.json"

This constant identifies the default local Codex OAuth credential file that the runtime later reads. Reusing a login token is sensitive even though outbound use is restricted to an official host.

高

cli/image2ppt/runtime/formula_renderer.py:79

Python subprocess.run

result = subprocess.run(

The runtime executes a TeX engine on supplied formula content, and the CLI exposes an optional --shell-escape mode. Enabling that mode allows TeX content to invoke operating-system commands.

高

cli/image2ppt/runtime/paddle_text_hints.py:78

Python HTTP libraries

jsonl = requests.get(status["resultUrl"]["jsonUrl"], timeout=60)

The code fetches a result URL supplied by the OCR response without validating its host or redirect chain. A compromised service response could direct the client to an unintended network target.

中

cli/image2ppt/runtime/image_gen.py:46

Hidden file access

DEFAULT_CODEX_AUTH_FILE = "~/.codex/auth.json"

This constant identifies the default local Codex OAuth credential file that the runtime later reads. Reusing a login token is sensitive even though outbound use is restricted to an official host.

中

cli/image2ppt/runtime/runtime_env.py:19

Hidden file access

DEFAULT_CODEX_AUTH_FILE = "~/.codex/auth.json"

This constant identifies the default local Codex OAuth credential file that the runtime later reads. Reusing a login token is sensitive even though outbound use is restricted to an official host.

中

cli/image2ppt/runtime/runtime_env.py:94

Python file write/append

with os.fdopen(fd, "w", encoding="utf-8") as handle:

This write persists configuration values that may include API keys and OCR tokens in YAML. Owner-only permissions reduce exposure, but plaintext secret storage remains a credential risk.

中

cli/image2ppt/runtime/image_gen.py:290

HTTP client library

def _open_codex_request(req: request.Request, timeout: int):

This function opens outbound Codex image requests. The destination is allowlisted and redirects are blocked, but task data and credentials cross a network boundary.

中

cli/image2ppt/runtime/image_gen.py:380

HTTP client library

with _open_codex_request(req, timeout) as resp:

This is the outbound request that sends the image-generation body and bearer authorization to the official ChatGPT endpoint. Host validation reduces credential exfiltration risk.

中

cli/image2ppt/runtime/paddle_text_hints.py:54

Python HTTP libraries

response = requests.post(

The code uploads a user slide or PDF and an authorization token to the PaddleOCR cloud endpoint. This is intentional but exposes document content to an external service.

低

cli/image2ppt/runtime/image_gen.py:163

getenv function call

if key not in ENV_FIELDS or os.getenv(key):