ppt-keynote
Apple Keynote-level presentation slides, one card per screen, switchable with keyboard left/right arrows
1How It Works & Mechanism
This skill is not an executable program, but a plain-text prompt template: the host parses the YAML frontmatter of SKILL.md with regex and loads the body content as the primary prompt.
const { fm, body } = parseFrontmatter(raw);
The template body is not executed independently; instead, it is concatenated into the "template section" of the final prompt: shared design directives + this template's body + user content.
prompt = assemblePrompt({ body: skill.body, content, format });
The global "content-driven quantity" rule overrides any numbers within the template: the template only defines layout/style/palette/component library, not the output length.
数量**完全由【用户内容】的实际长度和信息结构决定**
The output format is subject to hard global constraints: single-file HTML, pure HTML without fences, the first character must be <, and no file writing is permitted (stdout is captured by the frontend).
不要用 markdown 代码围栏包裹, 不要任何解释性文字
The frontmatter metadata drives the selector rendering (Chinese name / English name / emoji / description / category / scenario / aspect ratio / tags / example metadata).
zhName: fm.zh_name ?? fm.name ?? id,
Bundled example assets are exposed to the frontend via two read-only APIs: example.html is returned as-is into an iframe, and example.md serves as the input content for the "Preview" button.
verbatim so it can be loaded into an
Execution chain (host behavior, not this template's code): The host spawns the locally authenticated agent CLI, feeds the assembled prompt via stdin, and streams the HTML back from stdout.
child.stdin.write(opts.prompt);
The template is structured as a web deck with "one section per screen", where canvas dimensions and centering are fixed; combined with the shared directive "quantity is determined by content", page count scales with input length.
整体宽 1280 高 720, 居中显示, 背景渐变
This is the only template among the 9 that requires writing JS in the body: keyboard slide switching + hash routing, where interactivity is self-contained in the artifact rather than calling external services.
- 加一段 JavaScript 监听 ArrowLeft / ArrowRight / 空格键切换 slide; 同时维护 hash (#/3)。
Font sizes and color palettes specify class names and shade steps (text-7xl / font-semibold / tracking-tight / text-neutral-500), while requiring "maintaining whitespace, aligning data cards using grid layout, and restrained colors".
- 字号: 标题 `text-7xl font-semibold tracking-tight`, 副标题 `text-2xl text-neutral-500`。
2Core Capabilities
3External Dependencies
| Kind | Dependency / Endpoint |
|---|---|
| network | Tailwind Play CDN(共享指令对产物的要求) |
| network | jsdelivr CDN(可选:图表/动画脚本) |
| network | Google Fonts(共享指令指定) |
| cli | 本机 coding-agent CLI(宿主检测 PATH 并 spawn) |
| network | 随包示例 example.html 的外链(产物示例) |
4Recommended Governance & Evidence
- 网络端点: Declared external network access: No network request code in directory; the bundled example.html references https://cdn.tailwindcss.com in <head> (external link in example artifact,
5Second-Pass Verification
- [ok] skill 目录资产面(脚本 / references / 数据 / 模板) — 目录实为 3 个文件:SKILL.md 与 example.html、example.md;无 scripts/、无 references 目录、无任何可执行文件(.sh/.py/.js/.mjs/.ts 零命中)。
- [ok] 「无脚本、无网络、无凭证、无写盘」的反例搜索 — 对目录递归 token 扫描(api[_-]?key|token|secret|\.env|process\.env|child_process|fetch\(|curl |wget |npm |npx |exec\(|subprocess|writeFile|fs\.):仅命中 example.md / example.html 里作为示例文案出现的 "pnpm dev"(展示文本,非可执行指令);SKILL.md 另按 http|CDN|cdn|font|API|api|fetch|Google|script 扫描,仅命中 font-semibold / font-black 这类字重类名,无端点。
- [ok] 官方描述 vs 实际能力(有无夸大) — frontmatter description(苹果 Keynote 级别幻灯片, 一屏一卡, 键盘左右切换)与正文一致:描述承诺的版式要素都能在正文找到对应条目,未见正文未支持的越界承诺。
- [ok] 外部资源/工具条目逐条回源 — external_deps 中的仓库级条目(Tailwind Play CDN / jsdelivr / Google Fonts / 本机 agent CLI)逐条回到 shared.ts 与 argv.ts 原文取证;本模板另有 example.html 的 cdn.tailwindcss.com 外链,已在该 example.html 原文中定位。
- [ok] 宿主执行链(供 security.reason / verdict.risks 使用,不参与判级) — prompt 经 stdin 送入被 spawn 的本机 CLI(invoke.ts),HTML 从 stdout 分流捕获;claude 参数含 --permission-mode bypassPermissions、envFor 透传 process.env;预览 iframe sandbox="allow-scripts allow-same-origin"(template-picker.tsx:544 / preview-pane.tsx:297)。
- [ok] 路径与 commit 一致性 — 工作副本 /var/ytdown/skills-portal/spy-repos/html-anything 的 git HEAD = 553ed98c283f9c0f489902d035416a972d6a9699(与任务表 pin 一致);skill.path=next/src/lib/templates/skills/ppt-keynote 下确有 SKILL.md,全仓无第二份同名模板。
- [ok] 内联 <script> 是否改变"目录无脚本文件"结论 — example.html 含一段内联 JS(以 "// ←/→ scroll between slides; current implementation just smooth-scrolls" 起的 keydown 监听)。它属随包示例产物、只在预览 iframe 中执行;SKILL.md(skill 指令面)无任何脚本执行要求,目录内也没有任何脚本文件,故仍判 green——已在 security.reason 与 verdict.risks 明写。
- [ok] 键盘导航是否依赖外部库 — 示例脚本为原生 document.addEventListener 实现,无 import、无 CDN JS;SKILL.md 也只要求"加一段 JavaScript",不点名任何库。
6Verdict & Scenarios
3e33c78e36b73ce5…