Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add fanfan-de/anybox --skill lark-slidesgit clone --depth 1 https://github.com/fanfan-de/anyboxWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/fanfan-de/anybox/lark-slides)<a href="https://agentmods.dev/skills/fanfan-de/anybox/lark-slides"><img src="https://agentmods.dev/badge/skills/fanfan-de/anybox/lark-slides/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/fanfan-de/anybox/lark-slides"><img src="https://agentmods.dev/badge/skills/fanfan-de/anybox/lark-slides.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00074 | $0.05541 |
| Opus 5 | $0.00037 | $0.02771 |
| Sonnet 5 | $0.00015 | $0.01108 |
| Haiku 4.5 | $0.00007 | $0.00554 |
Grade A, and why
lark-slides scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
8. **`<img src>` 只能用上传到飞书 drive 的 `file_token`,禁止使用 http(s) 外链 URL**:飞书 slides 渲染端不会代理外链图片,外链 src 在 PPT 里通常不显示或显示破图。流程必须是「先把图存到本地 → 用 `slides +media-upload` 上传或 `+create --slides` 的 `@./path` 占位符自动上传 → 拿 `file_token` 写进 How it starts
The opening of the file, as written. The whole thing — 297 lines — stays where its author put it; the contents beside it link to each section on GitHub.
slides (v1)
Quick Reference
| 用户需求 | 优先动作 | 关键文档 / 命令 |
|---|---|---|
| 新建 PPT | 先规划 slide_plan.json,再按复杂度选择一步或两步创建 |
planning-layer.md、visual-planning.md、asset-planning.md、slides +create |
| 大幅改写页面 | 先回读现有 XML,写入新 plan,再替换或重建相关页面 | xml_presentations.get、+replace-slide、lark-slides-edit-workflows.md |
| 编辑单个标题、文本块、图片或局部元素 | 优先块级替换/插入,不改页序 | slides +replace-slide、lark-slides-replace-slide.md |
| 读取或分析已有 PPT | 解析 slides/wiki token,回读全文或单页 XML,保存 xml_presentation_id、slide_id、revision_id |
xml_presentations.get、xml_presentation.slide.get |
| 上传或使用图片 | 先上传为 file_token,禁止直接写 http(s) 外链 |
slides +media-upload,或 +create --slides 的 @./path 占位符 |
| 用户提到模板、主题、版式 | 先检索模板,再摘要,必要时裁切骨架 | template_tool.py search → summarize → extract |
| 创建失败、空白页、3350001、布局异常 | 先回读状态,再按排障清单修复,不假设原操作原子成功 | troubleshooting.md、validation-checklist.md |
CRITICAL — 开始前 MUST 先用 Read 工具读取 ../lark-shared/SKILL.md,其中包含认证、权限处理
CRITICAL — 生成任何 XML 之前,MUST 先用 Read 工具读取 xml-schema-quick-ref.md,禁止凭记忆猜测 XML 结构。
CRITICAL — 新建演示文稿或大幅改写页面时,MUST 先生成 .lark-slides/plan/<deck-or-task-id>/slide_plan.json,再生成 XML。先创建对应目录,规划层规则和中间产物生命周期见 planning-layer.md。仅替换一个标题、插入一个块等小型已有页编辑可豁免。
CRITICAL — 新建演示文稿或大幅改写页面时,生成 XML 前 MUST 读取 visual-planning.md,确保 layout_type、visual_focus、text_density 实际改变页面几何、主视觉和文本量。
CRITICAL — 新建演示文稿或大幅改写页面时,规划 asset_need MUST 遵循 asset-planning.md:只做元数据规划,必须有 fallback_if_missing,不得要求真实搜索、下载或上传素材。
CRITICAL — 创建或大幅改写后,MUST 按 validation-checklist.md 做显式验证:回读全文 XML、核对页数和关键元素、检查空白/破损页、明显溢出、布局风险;XML 语法和文本重叠静态检查优先使用 scripts/xml_text_overlap_lint.py。
CRITICAL — 创建前自检或失败排障时,MUST 按 troubleshooting.md 检查 XML 转义、结构、shell 截断、图片 token、3350001 和布局风险。
What ships with it
60 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- assets/templates/administration--all_hands_meeting.xml 104 KB
- assets/templates/administration--annual_gala.xml 62 KB
- assets/templates/administration--company_intro.xml 66 KB
- assets/templates/administration--corporate_culture.xml 84 KB
- assets/templates/hr--employee_training_workshop.xml 70 KB
- assets/templates/hr--employee_training.xml 52 KB
- assets/templates/hr--onboarding.xml 42 KB
- assets/templates/marketing--brand_communication.xml 68 KB
- assets/templates/marketing--brand_logo_design.xml 68 KB
- assets/templates/marketing--brand_operations_plan.xml 63 KB
- assets/templates/marketing--business_plan.xml 80 KB
- assets/templates/marketing--marketing_plan.xml 72 KB
- assets/templates/marketing--marketing_strategy.xml 72 KB
- assets/templates/marketing--product_whitepaper.xml 74 KB
- assets/templates/marketing--roadshow_business_plan.xml 75 KB
- assets/templates/misc--book_sharing.xml 70 KB
- assets/templates/misc--club_event_plan.xml 204 KB
- assets/templates/misc--student_career_plan.xml 83 KB
- assets/templates/office--dark_general.xml 198 KB
- assets/templates/office--dept_annual_report.xml 63 KB
- assets/templates/office--light_general.xml 183 KB
- assets/templates/office--project_kickoff.xml 148 KB
- assets/templates/office--quarterly_review.xml 58 KB
- assets/templates/office--work_report.xml 54 KB
- assets/templates/office--work_summary_report.xml 70 KB
- assets/templates/office--work_summary.xml 215 KB
- assets/templates/operations--brand_logo_design.xml 68 KB
- assets/templates/operations--brand_operations_plan.xml 63 KB
- assets/templates/operations--marketing_plan.xml 72 KB
- assets/templates/operations--product_promotion.xml 31 KB
- assets/templates/personal--experience_sharing.xml 110 KB
- assets/templates/personal--personal_resume.xml 97 KB
- assets/templates/personal--promotion_defense.xml 53 KB
- assets/templates/personal--promotion_report.xml 52 KB
- assets/templates/personal--self_intro.xml 32 KB
- assets/templates/personal--teaching_sharing.xml 152 KB
- assets/templates/product--business_case_analysis.xml 66 KB
- assets/templates/product--market_analysis.xml 42 KB
- assets/templates/product--product_analysis.xml 75 KB
- assets/templates/product--product_intro.xml 146 KB
- assets/templates/product--product_promotion_2.xml 31 KB
- assets/templates/product--product_promotion.xml 31 KB
- references/asset-planning.md 6.0 KB
- references/examples.md 5.8 KB
- references/lark-slides-create.md 7.0 KB
- references/lark-slides-edit-workflows.md 7.1 KB
- references/lark-slides-media-upload.md 5.5 KB
- references/lark-slides-replace-slide.md 11 KB
- references/lark-slides-xml-presentation-slide-create.md 8.3 KB
- references/lark-slides-xml-presentation-slide-delete.md 3.8 KB
- references/lark-slides-xml-presentation-slide-get.md 3.3 KB
- references/lark-slides-xml-presentation-slide-replace.md 6.9 KB
- references/lark-slides-xml-presentations-get.md 2.8 KB
- references/planning-layer.md 13 KB
- references/slide-templates.md 9.1 KB
- references/slides_demo.xml 12 KB
- references/slides_xml_schema_definition.xml 166 KB
- references/template-catalog.md 27 KB
- references/template-index.json 51 KB
- references/troubleshooting.md 5.5 KB
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 9d ago First seen · 297 lines · 74 tokens per session scan A e27525f04392
lark-slides is a skill published in the GitHub repository fanfan-de/anybox (57 stars, last pushed 29d ago), licensed MIT. It adds 74 tokens to every session and 5,541 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other skills, from other repositories
systematic-debugging
Use when encountering any bug, test failure, or unexpected behavior, before proposing fixes.
local-ai-agents
Build local-first AI agents that run entirely on a developer workstation with Microsoft Foundry Local and Qwen function-calling models. Covers Small Language Models (SLMs), the OpenAI-compatible local endpoint, sandboxed local tools, local RAG with Chroma, local MCP servers, hybrid cloud/local routing, and the…
next-cache-components-adoption
Turn on Cache Components in a Next.js app and resolve the blocking routes it surfaces. Use when the user wants to enable, adopt, or migrate to Cache Components, flip the cacheComponents flag, work through a flood of blocking-prerender / instant validation errors, run the cache-components-instant-false codemod, or…
chat-pet-sprite-creation
Use when creating or changing VS Code chat pet sprite art, sprite sheets, state animations, eye treatments, Stable/Insiders variants, or pet transitions under src/vs/workbench/contrib/chat/browser/widget/media/chatPet.
cpu-profile-analysis
Analyze V8/Chrome CPU profiles (.cpuprofile) and DevTools trace files (Trace-.json). Use when: profiling performance, investigating slow functions, comparing code paths, finding bottlenecks, analyzing timeToRequest, understanding call trees from sampling profiler data, analyzing layout/paint/rendering, investigating…
insight-error-page
Write or audit an insight-kind error page for the Next.js dev overlay. Use when creating a new errors/ .mdx page, auditing an existing one, or checking that a page matches the framework fix cards. Covers page structure, title alignment, FixCard cards with Copy prompt button, code snippets, terminology verification…