Grades are a hygiene check, not a security guarantee.

Claude Code, Skill

Dknowc Ppt Assistant

当用户要求制作 PPT、演示文稿、汇报 PPT、工作总结汇报、课件、宣讲材料、把材料转成 PPT、做幻灯片，或要求可编辑原生 PPT、多版式（16:9/4:3/小红书/朋友圈/竖版/A4）输出时，使用深知可信PPT。生成侧采用约束 SVG → 原生 DrawingML 编译路线：主 Agent 逐页手写约束 SVG，确定性编译器导出真实可编辑的 PowerPoint（原生形状/文本/图表/表格，非整页图片）；内容侧完全使用深知可信智能 API：通过深知可信搜索检索权威政策、数据与案例素材，全程可溯源。内置党政简洁、数据图表、商务汇报、庄重典雅、培训课件等

Compatibility: Not stated.

Grade B

Minor issues only, no Medium or High. Worth a quick look at the findings below before installing.

Graded by PlugVetRubric v2

Not a guarantee. A hygiene check of the source at the commit shown, not a security audit.

PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV SECRETS_ENV_READ OBFUSCATION_FILE_OVER_READ_CAP

Why this grade

  • PERMISSION_DELETE_FILES Low

    Contains a call that can delete files.

    scripts/deliver_outputs.py, line 125 proc = subprocess.run(

  • NETWORK_NO_FIXED_HOST Low

    Makes a network call whose host is not written as a fixed address.

    scripts/register_key.mjs, line 189 const response = await fetch(url, {

  • SECRETS_PATH_DOTENV Low

    Mentions a .env file.

    scripts/config.py, line 55 USER_ENV_FILE = USER_CONFIG_DIR / '.env'

  • SECRETS_ENV_READ Note

    Reads an environment variable whose name contains KEY, SECRET, TOKEN, PASSWORD or CREDENTIAL.

    scripts/trusted_search.py, line 43 return os.environ.get("DKNOWC_API_KEY")

  • OBFUSCATION_FILE_OVER_READ_CAP Note

    A file was over the read cap and was not fully read.

    references/sample_trace_report.html, line 1 <!doctype html>

Any High, or two or more Medium findings, give D. One Medium gives C. Low findings or a security Note give B. Each code names a finding behind the letter.

Grades are a hygiene check of the source at the commit shown, on the date checked, not a security audit or a guarantee. The free directory grades are automated. Before release, a PlugVet engineer reviews every paid report and any grade we hold back, including all F grades, against the source code and the evidence we quote.

What was checked

Plain notes from the hygiene checks.

  • Permissions

    Concern

    can delete files.

    PERMISSION_DELETE_FILES

    scripts/deliver_outputs.py, line 125

    proc = subprocess.run(

    scripts/finalize_svg.py, line 173

    shutil.rmtree(transaction_dir, ignore_errors=True)

    scripts/finalize_svg.py, line 405

    shutil.rmtree(candidate_dir, ignore_errors=True)

    Show more

    scripts/update_spec.py, line 192

    shutil.rmtree(transaction_dir, ignore_errors=True)

    scripts/pptx_to_svg/converter.py, line 952

    shutil.rmtree(transaction_dir, ignore_errors=True)

    scripts/pptx_to_svg/converter.py, line 1049

    shutil.rmtree(staging_root, ignore_errors=True)

    scripts/pptx_to_svg/pic_to_svg.py, line 346

    subprocess.run(

    scripts/svg_to_pptx/pptx_package/narration.py, line 140

    result = subprocess.run(

    references/upstream-docs/svg-pipeline.md, line 135

    result = subprocess.run(

    references/upstream-docs/svg-pipeline.md, line 251

    rejected = subprocess.run(

    scripts/svg_to_pptx/pptx_package/builder.py, line 3975

    result = subprocess.run(

  • Install and update

    Pass

    No install-time script found, and dependencies are pinned or absent.

  • Network

    Concern

    can reach a host that is not written as a fixed address.

    NETWORK_NO_FIXED_HOST

    scripts/register_key.mjs, line 189

    const response = await fetch(url, {

    scripts/register_key.mjs, line 243

    const response = await fetch(url, {

    scripts/trusted_search.py, line 209

    with urllib.request.urlopen(req, timeout=timeout) as resp:

  • Secrets

    Concern

    reads a credential or environment file.

    SECRETS_ENV_READ SECRETS_PATH_DOTENV

    scripts/config.py, line 55

    USER_ENV_FILE = USER_CONFIG_DIR / '.env'

    scripts/config.py, line 59

    """Return the supported .env lookup order."""

    scripts/trusted_search.py, line 43

    return os.environ.get("DKNOWC_API_KEY")

    Show more

    scripts/config.py, line 61

    Path.cwd() / '.env',

    scripts/config.py, line 62

    PROJECT_ROOT / '.env',

    scripts/config.py, line 63

    REPO_ROOT / '.env',

    scripts/config.py, line 70

    Return the first existing .env path.

    scripts/config.py, line 72

    If no candidate exists, return the CWD .env path so callers can no-op

    scripts/config.py, line 83

    """Strip matching surrounding quotes from a .env value."""

  • Agent instructions

    Pass

    No instruction to ignore earlier instructions or to hide a step.

  • Obfuscation

    Note

    a file was over the read cap and was not fully read.

    OBFUSCATION_FILE_OVER_READ_CAP

    references/sample_trace_report.html, line 1

    <!doctype html>

    scripts/pptx_animation_presets.json, line 1

    {

    scripts/pptx_shapes/data/presetShapeDefinitions.xml, line 1

    <?xml version="1.0" encoding="utf-8"?>

    Show more

    scripts/svg_quality/checker.py, line 1

    #!/usr/bin/env python3

    scripts/svg_to_pptx/pptx_package/builder.py, line 1

    """Core PPTX assembly: create_pptx_with_native_svg."""

  • Licence

    Pass

    A licence file is present (LICENSE).

  • Maintainer activity

    Pass

    The latest commit is within the last 365 days.

Get the full report on this tool, £49

Note

Hygiene check of commit e37c74918d8b. can delete files. can reach a host that is not written as a fixed address. reads a credential or environment file. a file was over the read cap and was not fully read.

Date and source

Date checked:

View source

github.com

Commit graded: e37c74918d8b0550a798eecfc6424124940de533

This link goes to the original host. PlugVet does not host or check what you download from there, and installing it is your own decision and risk.

Read how this letter is chosen