importer

importer is a skill for Claude Code, Codex from THU-MAIC/OpenMAIC. It costs 0 tokens per session (1,726 once invoked), scanned A, original, MIT.

A development skill for importing and debugging PowerPoint files in OpenMAIC. It covers converting presentations to JSON and investigating differences between the source slides and their rendered output.

In plain words
What is it for?
Use it to inspect slide layout data, extract PowerPoint XML, investigate low-scoring comparisons, and fix import or rendering problems.
Why use it?
It provides a documented process for finding whether a slide problem comes from parsing the PowerPoint file or rendering it.

Skill for Claude CodeCodex

Written for no agent in particular: nothing here depends on one.

Good fit Use it to inspect slide layout data, extract PowerPoint XML, investigate low-scoring comparisons, and fix import or rendering problems.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/thu-maic/openmaic/importer
About the project

OpenMAIC is a multi-agent classroom platform that uses agents to plan, build, and revise interactive courses from prompts and uploaded materials. It is designed for immersive learning experiences and supports course components such as slides, quizzes, interactives, projects, images, video, voices, and PowerPoint imports, with catalogue skills covering its workflows.

THU-MAIC/OpenMAIC · 32,590 stars · on GitHub

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add THU-MAIC/OpenMAIC --skill importer
Clone the repo
git clone --depth 1 https://github.com/THU-MAIC/OpenMAIC

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for importer

README.md
[![agentmods](https://agentmods.dev/badge/skills/thu-maic/openmaic/importer.svg)](https://agentmods.dev/skills/thu-maic/openmaic/importer)
Your own site
<a href="https://agentmods.dev/skills/thu-maic/openmaic/importer"><img src="https://agentmods.dev/badge/skills/thu-maic/openmaic/importer.svg" alt="Measured on agentmods" height="20"></a>
Per session 0 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,726 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe. ✓ AI security review Sonnet 5 · 6 Sept 2026 📄 Read the review Third-party audits
  • Snyk pass 7 Sept 2026
  • NVIDIA SkillSpector warn 7 Sept 2026
SkillSpector: 4 findings, up to high

These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →

  • high Privilege Escalation · line 51
    Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
    Fix: Remove references to credential paths. Use environment variables or secrets managers. For docs, use placeholder paths (e.g., /path/to/config). Never load .env or token files in production code paths.
  • medium MCP Rug Pull · line 57
    npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.
    Fix: Pin the version: npx @scope/[email protected]
  • medium MCP Rug Pull · line 79
    npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.
    Fix: Pin the version: npx @scope/[email protected]
  • medium MCP Rug Pull · line 89
    npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.
    Fix: Pin the version: npx @scope/[email protected]
How audits are shown
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00000 $0.01726
Opus 5 $0.00000 $0.00863
Sonnet 5 $0.00000 $0.00345
Haiku 4.5 $0.00000 $0.00173

Measured 8d ago against content hash 5705afd786ad, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-07, from the pricing page.

Security

Grade A, and why

importer scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.

The scan reads SKILL.md. This mod also ships 51 executable files (.babelrc.cjs, .eslintrc.cjs, rollup.config.js, …), listed below but not scanned — reading those needs a real analyzer, not pattern matching.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

packages/@openmaic/importer/SKILL.md · 222 lines

How it starts

The opening of the file, as written. The whole thing — 222 lines — stays where its author put it; the contents beside it link to each section on GitHub.

SKILL

maic-importer 开发规范。请先读 DESIGN.md 了解架构。

还原质量迭代(必读)

项目根目录 iterate-prompt.md 规定如何从 comparison_run 拉低分、聚类、写报告。每批迭代交付:

  • iteration-<version>-report.md(仓库根目录)

  • 针对本包的解析侧修复(渲染问题在 packages/@openmaic/renderer

test-0601-002(deck:第一节 养老服务管理概述)要点:

| 现象 | 侧 | 查哪里 |

|---|---|---|

| Logo 上多 5 个空心圆 | 解析 | layoutElements 里 master 组「组合 7」;子椭圆 grpFill 勿把父组 fill 摊到每个 child → shapeSerializer.ts |

| 照片应是圆却变方 | 解析 | p:pic + custGeomimageSerializer.resolvePresetGeom |

| 画布四周边框 | 渲染 | SlideCanvas chrome(截图须 false) |

| 文字整体偏上 | 解析+渲染 | bodyPr@anchorvAligntransformParsedToSlides + BaseTextElement |

| 正文偏粗、换行少 | 解析+渲染 | replaceFontFamilyInHtml / 文本框 width |

调试时 一定要看 layoutElements,Logo/页脚/master 装饰常在这里,不在 elements


# 仓库根:拉低分

node --env-file=.env.development scripts/inspect-low-scores.mjs test-0601-002



# 本包:JSON(含 layoutElements)

npx tsx scripts/transvert.ts /path/to.pptx ./out.json

node -e "const s=require('./out.json').slides[1]; console.log(s.layoutElements?.length, s.elements?.length)"

修 bug 的标准流程


# 1. 解压 pptx 看源 XML

node scripts/extract-pptx-structure.js ./xxx.pptx ./out



# 2. 生成修改前的 JSON

npx tsx scripts/transvert.ts ./xxx.pptx ./before.json



# 3. 改代码



# 4. 生成修改后的 JSON,diff 对比

npx tsx scripts/transvert.ts ./xxx.pptx ./after.json

定位思路:JSON 数值错 → serializer;节点类型错 → model/Slide.ts;颜色错 → StyleResolver + color.ts;模板继承错 → RenderContext.ts;master/layout 装饰slideSerializerlayoutElements + shapeSerializergrpFill / ln+noFill vs lnRef

OOXML 陷阱(本 deck 已踩)

  1. <a:grpFill/>:子形状由组级合成,JSON 里每个 child 的 fill 应为 transparent不能grpSpPr 的 solidFill 抄到每个椭圆上,也不能fillRef 补色(test-0601-002 的 5 个 Logo 圆点即此类)。

  2. <a:ln><a:noFill/></a:ln>:显式无描边优先于 lnRef(见 shapeSerializernoFillSuppressed)。

Read the full file on GitHub · 222 lines

Files

What ships with it

60 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 8d ago First seen · 222 lines · 0 tokens per session scan A 5705afd786ad

Subscribe to this mod's changes

importer is a skill published in the GitHub repository THU-MAIC/OpenMAIC (32,590 stars, last pushed yesterday), licensed MIT. It costs nothing until one of its globs matches a file; then it loads 1,726 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other skills, from other repositories

orbit-notion

Open Orbit briefing skill — selected by the Orbit pipeline when Notion is the user's only connected connector, or when the user explicitly scopes their daily digest to Notion. Pulls the past 24 hours of document edits, comments, mentions, and database row changes from the user's authenticated Notion connection and…

nexu-io/open-design · 117 tokens

instrument-data-to-allotrope

Convert laboratory instrument output files (PDF, CSV, Excel, TXT) to Allotrope Simple Model (ASM) JSON format or flattened 2D CSV. Use this skill when scientists need to standardize instrument data for LIMS systems, data lakes, or downstream analysis. Supports auto-detection of instrument types. Outputs include full…

anthropics/knowledge-work-plugins · 123 tokens

baoyu-youtube-transcript

A tool for downloading the written captions, subtitles, chapter information, speaker labels, and cover image from a YouTube video using its URL or ID.

JimLiu/baoyu-skills · 107 tokens

feishu

Work with Feishu or Lark bots, docs, sheets, bitables, approval flows, and OpenAPI/MCP setup without hardcoding credentials.

Hmbown/CodeWhale · 33 tokens

read

Reads URLs and PDFs by fetching source content, defaulting to concise summaries for plain read requests and clean Markdown when asked to convert, save, quote, cite, or feed downstream work. Use when users ask in any language to read, fetch, check, summarize, quote, cite, convert, or save a URL or PDF. Not for local…

tw93/Waza · 78 tokens

overleaf-sync

A two-way connection between a local paper folder and Overleaf, a web-based LaTeX editor for writing research papers. It lets you move changes between the local files and the shared Overleaf project.

wanshuiyin/Auto-claude-code-research-in-sleep · 97 tokens