Skywork PPT (skywork) - Use when the user wants to work with PowerPoint presentations. Triggers: (1) Generate a new PPT from a topic — 'generate a PPT', 'cre...
Security Analysis
high confidenceThe skill's required pieces (python3, SKYWORK_API_KEY, and the included scripts) match its stated PPT generation/editing purpose — it uploads files/queries to a Skywork backend and runs local Python helpers, so avoid sending sensitive data to the remote service.
The name/description (PowerPoint generation, imitation, editing, conversion, local ops) aligns with the code and runtime instructions: scripts perform uploads, parsing, SSE-backed conversions, edits, and local pptx manipulation. Requiring python3 and a SKYWORK_API_KEY is expected for this design.
The SKILL.md explicitly instructs uploading local files and sending the full, verbatim user query to the Skywork service and to poll logs every 5 seconds while backend jobs run. Those actions are coherent with the skill's features but have clear privacy/telemetry implications — the skill will transmit user-provided content and queries to the remote gateway.
There is no formal install spec in the registry, but SKILL.md includes an environment check that runs pip to install python-pptx at runtime. The repository contains runnable Python scripts that the agent will execute locally. Installing a package at runtime and executing bundled scripts is expected here but means code will run on the host and may modify the Python environment.
Only SKYWORK_API_KEY is requested and used by the scripts. That single credential matches the remote API usage. There are no other unrelated env vars or credential requests.
The skill is not marked always:true and does not request persistent system-wide privileges. It does autonomously invoke remote APIs as part of normal operation (disable-model-invocation is false), which is the platform default and appropriate for this skill.
Guidance
This skill is internally consistent with its description, but it uploads local files and the user's full query text to a remote Skywork service. Before installing: (1) Confirm you trust https://skywork.ai and review its privacy/data handling policy; (2) Do not send confidential or sensitive files/PII unless you're comfortable with remote processing; (3) Limit the SKYWORK_API_KEY's scope if possible and rotate it after use; (4) Consider running the skill in an isolated environment or container because it runs pip install and executes local Python scripts that write files (downloads saved to provided output paths and /tmp); (5) For highly sensitive operations, prefer the Local ops (Layer 3) which explicitly runs only python-pptx locally without uploading to the backend. If you want more assurance, inspect constant.py to see the exact SKYWORK_GATEWAY_URL the code will call.
Latest Release
v1.0.9
**Added support for converting NotebookLM-exported files to editable PPTX.** - New capability: Convert .pptx or .pdf exported from NotebookLM to fully editable PPTX format (Layer 5). - Added script: scripts/run_editable_convert.py to handle the conversion process. - Added workflow guide: workflow_convert_editable.md. - Updated skill description and workflow to include the new conversion feature.
More by @gxcun17
Published by @gxcun17 on ClawHub
