Execute and verify the end-to-end LandPPT protected project workflow for non-browser automation, including project creation, interruption-safe recovery, free-template generation and confirmation, slide generation, share/export, and post-generation speech or narration operations. Use this skill whenever the user wants to generate, resume, verify, edit, narrate, share, or export a LandPPT project through scripts, curl, n8n, CLI, or other API-driven automation instead of the web UI.
Risky behavior the analysis could not rule out.
showTemplatePreview loads LLM-generated or user-imported template HTML into a same-origin blob-URL iframe without a visible sandbox attribute, so script embedded in that HTML could execute with the LandPPT web app origin and reach its /api endpoints.
const blob = new Blob([htmlTemplate], { type: 'text/html' });Undeclared residue: the shipped auth page lazily injects the Cloudflare Turnstile CAPTCHA script from challenges.cloudflare.com (also re-loaded by the fallback file and injected via ensureTurnstileScriptLoaded), an external script load the skill's declared LandPPT automation purpose does not declare.
const TURNSTILE_LAZY_SCRIPT_FALLBACK =
The auth page lazily creates a script element from the challenges.cloudflare.com Turnstile URL (also the fallback file's default) and appends it to the document head, a third-party script load covered by neither the declared description nor D29 (listed as residue R13), and no carve-out or mitigation applies.
Template preview loads stored or LLM-generated template HTML into a blob-URL iframe without a sandbox attribute, allowing template scripts to run with the application's origin when a user previews an imported or generated template.
const blob = new Blob([previewHtml], { type: 'text/html' });setIframeContent loads stored template html_template (imported or API-served) into a blob-URL iframe that the code creates without any sandbox attribute, and blob URLs inherit the creating page's origin, so embedded template scripts execute with application privileges; undeclared and unmitigated.
setSafeIframeContent writes slide HTML containing remote CDN scripts (Tailwind CDN kept unpinned and SRI attributes stripped by prepareHtmlForPreview) into iframe.srcdoc without a sandbox attribute, executing fetched remote code with the parent application origin's privileges.
iframe.srcdoc = preparedHtml;
setSafeIframeContent writes slide HTML into iframe.srcdoc (which inherits the parent origin) with no sandbox, after prepareHtmlForPreview strips integrity/crossorigin attributes and keeps the unpinned Tailwind CDN when in use, so remote scripts execute with application-origin privileges; no carve-out or mitigation covers this.
The editor iframe reinitializer executes arbitrary inline script text found in the slide document via iframeWindow.eval when Chart canvases are uninitialized, running slide-embedded code with the application origin's privileges.
iframeWindow.eval(script.textContent);
forceReinitializeIframeJS collects inline script elements from the slide document and re-executes their text via iframeWindow.eval when Chart canvases are uninitialized, running slide-embedded code at the application origin's privileges; the claim matches the code and nothing declares or mitigates it.
The image-gallery renderer builds inline onclick JavaScript handlers by interpolating server-supplied gallery metadata (image.id, image.url, image.category) without escaping, so a malicious gallery entry could break out of the string and execute script in the editor page.
id: '${image.id}',The shipped editor code interpolates image.id/url/category unescaped into an inline onclick string that is assigned via innerHTML; title/alt/description are escaped but the flagged fields are not, and no shown mitigation or trust guarantee covers them, so the EXEC sink and its data chain stand.
Preview rendering places stored template HTML into a Blob-URL iframe (setIframeContent) and a srcdoc iframe (loadHtmlIntoIframe), both of which inherit the application origin, so scripts embedded in template content execute with the app origin's privileges rather than in a sandboxed frame.
const blob = new Blob([previewHtml], { type: 'text/html' });The shown preview code does place API-returned template HTML into a blob-URL iframe and a srcdoc iframe with no sandbox attribute anywhere in the shown units, and the API-to-sink flow is connected in the shown code, so the origin-privileged script-execution finding stands.
A desktop-notification click handler assigns a server-supplied link_url directly to window.location.href without scheme validation, so a javascript: or off-host URL in a notification would execute or redirect in the app origin on user click.
if (latest.link_url) window.location.href = latest.link_url;
The desktop-notification click handler assigns the fetched notification's link_url straight to window.location.href with no scheme validation, the same unvalidated pattern recurs in handleItemClick, and no shown allowlist or check mitigates either path, so the EXEC finding stands.
The bundled web-app admin stylesheet fetches unpinned CSS from the third-party mirror host fonts.loli.net at page load, an undeclared remote-content fetch that the skill's declared API-automation purpose does not cover.
@import url('https://fonts.loli.net/css2?family=Inter:wght@300;400;500;600;700;800&display=swap');The shipped admin stylesheet imports unpinned CSS from the third-party mirror fonts.loli.net at page load; this executed remote-content fetch is declared nowhere (the only declared claim concerns locally served editor-screenshot vendor assets) and no carve-out applies, so the low-severity supply finding stands.
The bundled auth-page stylesheet fetches unpinned CSS from the third-party mirror host fonts.loli.net, an undeclared remote-content fetch that the skill's declared API-automation purpose does not cover.
@import url('https://fonts.loli.net/css2?family=Inter:wght@300;400;500;600;700;800&display=swap');The shipped auth stylesheet likewise imports unpinned CSS from fonts.loli.net at page load; the fetch is real, undeclared by the API-automation description, and outside every carve-out, so it stands.
The legacy template page's Markdown formatter interpolates LLM response text into HTML without escaping outside fenced code blocks, so injected markup in an LLM response can become live HTML if the formatted output is rendered.
formatted = formatted.replace(/`([^`]+)`/g, '<code>$1</code>');
The auth page injects a remote script from challenges.cloudflare.com (Cloudflare Turnstile) at runtime, with the script URL overridable via a DOM data attribute, loading third-party code not disclosed by the skill description.
https://challenges.cloudflare.com/turnstile/v0/api.js?render=explicit
The injected script URL is taken from the container data attribute with the Cloudflare Turnstile endpoint as fallback and appended to the head, so third-party code is loaded at runtime; nothing in the declared description or claims discloses this and no carve-out covers it.
The template gallery renders global template metadata (name, description, tags, creator) into card.innerHTML without HTML escaping, so a malicious template stored via the import/API path executes script in the viewer's browser with the application session.
<h4 style=
buildTemplateCard interpolates API-stored template fields (name, description, tags, creator) into card.innerHTML with no escaping anywhere in the function, and templates enter through the unvalidated import/API path, giving a connected stored-XSS chain; nothing declares or mitigates it.
The template picker builds a blob URL from server-provided template html_template (only {{placeholder}} text is escaped, script tags pass through _tplBuildPreviewHtml) and loads it in an iframe without a sandbox attribute, so any script embedded in a global template executes with the application origin's privileges.
const blob = new Blob([previewHtml], { type: 'text/html' });_tplBuildPreviewHtml passes rawHtml through with only {{placeholder}} substitution, so script tags in server-stored templates survive into the blob URL that _tplRenderTemplatePreview assigns to a sandbox-less iframe; the chain from /api/global-master-templates to iframe.src is connected and undeclared.
The PPTX export code's own recovered comment states it loads the latest icon rules JSON at export time with online hot-update support, a remote rules fetch whose destination host and trust status are not shown in the reviewed content.
Load latest icon rules JSON before export (supports online hot-update).
The slides editor image library inserts the unescaped gallery-API image title into innerHTML when rendering library items, so crafted image metadata could inject HTML/script into the editor page.
<div>${image.title || '未命名图片'}</div>renderLibraryImages interpolates the gallery-API image title into item.innerHTML without any escaping, a connected chain from /api/image/gallery/list to the editor page DOM; the behavior is undeclared and not within any carve-out.
Both scripts hard-code a Chrome browser User-Agent on every API request specifically to avoid WAF/bot-protection blocking (e.g. Cloudflare) of the default Python urllib client, disguising automated traffic as browser traffic toward the target server.
Some hosted deployments sit behind WAF/bot protection that may block the
The cited unit shows headers() stamps a hard-coded Chrome User-Agent onto every API request with a docstring explicitly about defeating WAF/bot-protection blocks; this deceptive-client behavior is declared nowhere in the skill description and no carve-out or mitigation applies, so the low-severity finding stands.
The bundled scripts' recovered docstrings instruct always sending a browser-like User-Agent to defeat WAF/bot-protection blocks (e.g., Cloudflare 1010) on the targeted LandPPT host, a deceptive-client technique whose allowed destinations are not constrained by the shown text.
Always send a browser-like User-Agent by default.
The recovered docstring and headers function confirm every request to the targeted LandPPT host carries a browser-like User-Agent specifically 'by default' to defeat WAF/bot-protection blocks; this is undeclared by the skill description, uncovered by any carve-out, and wired into the live request path, so the finding stands.
What the analysis could not settle from the code alone.
Candidates the review stage examined and rejected, kept for transparency.
project_ops.py run_command reads local outline, HTML, and slides files from disk and sends their full contents in HTTP request bodies (request_raw/urlopen) to the configured LandPPT base_url, which is the service the skill is declared to automate and defaults to localhost, so no undisclosed destination is established.
content = read_text(args.outline_file) if args.outline_file else (args.outline_content or
The quoted code reads a caller-supplied outline file and POSTs its content to the user-configured --base-url /update-outline endpoint of the wrapped LandPPT service — exactly the declared 'edit ... a LandPPT project through scripts ... API-driven automation' capability with no undisclosed destination — so the harm and undeclared gates fail on the declared-core-capability carve-out.
Both scripts read the LandPPT API key from the LANDPPT_USER_API_KEY/LANDPPT_API_KEY environment variables and transmit it as an Authorization/X-API-Key header on every HTTP request to the user-configured --base-url LandPPT server; this matches the declared capability (API automation of the wrapped service), so it is reported as contextual risk rather than abuse.
os.environ.get(
The env-read key is the wrapped LandPPT service's own credential, sent only as X-API-Key/Authorization to the user-configured --base-url for that service; that is the accepted env-API-key-for-wrapped-service carve-out and the declared API-automation capability, so the finding is refuted.
The decision-model settings UI submits the user-entered API key to the backend packages/settings endpoint and defaults the model endpoint to the third-party host api.typesafe.ai (or api.openai.com), an external integration that contradicts the skill's local-serving claim.
'https://api.typesafe.ai/v1/systemone'
Every request this UI makes goes to the app's own same-origin '/api/global-master-templates/packages/settings' endpoint — the storage the settings form exists for — and api.typesafe.ai/api.openai.com appear only as user-visible, user-editable default values for the external decision-model endpoint, so no third-party transmission chain exists in this code and the only declared local-serving claim (editor-screenshot vendor assets) is not implicated.
The vendored html2canvas image-proxy routine sends a resource URL taken from the rendered page as a GET query parameter to a caller-configured proxy endpoint over XMLHttpRequest, so if the application configures the proxy to any third-party host, fetched image URLs leave the host with no destination fixed in this file.
B.open(
The proxy routine is inert unless the integrator sets options.proxy (it throws 'No proxy defined' otherwise), and the only shown caller — the artifact's own screenshot code — passes useCORS:true and no proxy option, so the claimed URL-to-proxy flow is not connected in shipped usage and the file's behavior is consistent with the declared claim that the library is served locally for editor screenshots.
The bundled browser process shim's checkTypeSupport opens an XHR GET probe to https://example.com when the page has an empty location.host, touching a third-party host with no user data attached, so it is a network capability check with negligible exfiltration potential rather than a connected source-to-sink chain.
xhr.open('GET', global$1.location.host ? '/' : 'https://example.com');The quoted browser process-shim probe only calls XMLHttpRequest.open() to prepare a URL and never calls send() (xhr is later set to null to help gc), so no request is ever transmitted and example.com is never contacted; the claim that the third-party host is 'touched' misreads the quoted code, killing both the harm and the exfil chain.
The slides editor renders the user's selected slide element (including embedded slide content) to a JPEG screenshot via html2canvas inside the preview iframe and places it in the payload handed to window.landpptAgentClient.start, whose network destination is not established in these units.
elementScreenshot: elementScreenshot,
The screenshot is an overt, user-toggled vision-mode reference for the editor's own agent client, whose run ends in a preview, user-confirm, and undo round trip on the same agent client as the sidebar, making this the declared edit capability rather than unauthorized egress; no reviewed unit establishes any third-party sink for landpptAgentClient.start.
The slides editor frontend sends project topic, scenario, requirements, and edited slide HTML to the LandPPT backend via same-origin /api fetch calls that detector leads flag as contradicting a documented local-only claim, but no third-party (non-same-origin) destination is shown in the cited units.
await fetch(`/api/projects/${window.landpptEditorConfig.projectId}/slides/${slideIndex + 1}/regenerate/async`, {The cited sends are relative same-origin /api calls to the wrapped LandPPT backend — the declared API-driven project workflow — carrying the project's own topic/scenario/requirements, and no third-party destination appears in any cited unit; the EXFIL claim therefore fails the harm and chain gates, and D29 targets third-party script requests, not these calls.
Vision-mode code captures the current slide and prefers data URLs for uploaded images explicitly so an external AI model can read them, meaning slide and image content leaves the host via the AI chat payload whose destination endpoint is not shown in these units and which contradicts any local-only/no-third-party claim.
视觉模式优先使用 dataUrl，避免外部模型无法访问私有URL
Vision mode is an opt-in, explicitly announced feature of the AI chat assistant (button label and success notification both tell the user 'AI can see the current slide'), and sending the user's slide/uploaded images to the AI service is the declared AI-generation capability, not covert exfiltration; no third-party destination for the chat payload is shown, and D29 concerns only local serving of the screenshot script.
The PPTX export path dynamically injects a script element that loads and executes a dom-to-pptx bundle from the constant DOM_TO_PPTX_BUNDLE_PATH (defined outside the shown lines) with a cache-busting timestamp, so the executed code's destination cannot be verified from these units.
script.src = `${DOM_TO_PPTX_BUNDLE_PATH}?v=${encodeURIComponent(DOM_TO_PPTX_BUNDLE_VERSION)}&ts=${Date.now()}`;The follow-up units resolve the finding's stated uncertainty: DOM_TO_PPTX_BUNDLE_PATH is a literal same-origin relative static path (/static/js/dom-to-pptx.bundle.js) with a pinned version, and the loaded bundle is validated against an expected patch version before use — standard first-party lazy-loading serving the declared share/export workflow, not a harmful, concealed, or remotely-sourced execution chain.
Parts of the artifact the static analysis could not fully examine.
context:unanalyzable_binary binary content is only byte-scannedcontext:manifest_unparseable yaml: YAML aliases are not permittedcontext:manifest_unparseable yaml: YAML aliases are not permittedcontext:manifest_unparseable yaml: while parsing a flow nodecontext:manifest_unparseable yaml: while parsing a flow nodecontext:manifest_unparseable yaml: while parsing a flow nodecontext:manifest_unparseable yaml: while parsing a flow nodecontext:manifest_unparseable yaml: while parsing a flow nodecontext:manifest_unparseable yaml: while parsing a flow nodecontext:manifest_unparseable yaml: while parsing a flow nodecontext:manifest_unparseable yaml: while parsing a flow nodecontext:manifest_unparseable yaml: while parsing a flow nodecontext:manifest_unparseable yaml: while parsing a flow nodecontext:manifest_unparseable yaml: while parsing a flow nodecontext:manifest_unparseable yaml: while parsing a flow nodecontext:manifest_unparseable yaml: while parsing a flow nodecontext:manifest_unparseable yaml: while parsing a flow nodecontext:manifest_unparseable yaml: while parsing a flow nodecontext:manifest_unparseable yaml: while parsing a flow nodecontext:manifest_unparseable yaml: while parsing a flow nodecontext:manifest_unparseable yaml: while parsing a flow nodeunanalyzable_binary binary content is only byte-scannedglob_budget_exceeded reference source exceeds 262144 charactersast_oversize 2908537 bytes > 2000000; literal scan onlyledger_finding_without_valid_finding run 1: declared-vs-actual.40 SRC:a4d77dffbc3638e2ledger_finding_without_valid_finding run 1: declared-vs-actual.40 SRC:c842ed9ad39235f3ledger_finding_without_valid_finding run 1: behavior-chains.12 SRC:c842ed9ad39235f3ledger_finding_without_valid_finding run 1: behavior-chains.13 SRC:c262d7ad166270bfledger_finding_without_valid_finding run 1: behavior-chains.16 SRC:809fefa50fa73648ledger_finding_without_valid_finding run 1: behavior-chains.19 SRC:e4007afb90e4f459invalid_judge_finding declared-vs-actual.40invalid_judge_finding behavior-chains.12invalid_judge_finding behavior-chains.13invalid_judge_finding behavior-chains.16invalid_judge_finding behavior-chains.19request_unanswered request.0: instruction-surface.0/unattended-monitor-net: invalid answer output: schema: <root>: Additional properties are not allowed ('error' was unexpected); schema: <root>: 'echo' is a required property; schema: <root>: 'answers' is a required property; schema: <root>: 'findings' is a required property; schema: <root>: 'requests' is a required property; echo: missingrequest_unanswered request.0: instruction-surface.0/change-template-net: invalid answer output: schema: <root>: Additional properties are not allowed ('error' was unexpected); schema: <root>: 'echo' is a required property; schema: <root>: 'answers' is a required property; schema: <root>: 'findings' is a required property; schema: <root>: 'requests' is a required property; echo: missingrequest_unanswered request.0: instruction-surface.2/req-template-packages: invalid answer output: schema: <root>: Additional properties are not allowed ('error' was unexpected); schema: <root>: 'echo' is a required property; schema: <root>: 'answers' is a required property; schema: <root>: 'findings' is a required property; schema: <root>: 'requests' is a required property; echo: missingrequest_unanswered request.0: instruction-surface.2/req-nativechat-imgurl: invalid answer output: schema: <root>: Additional properties are not allowed ('error' was unexpected); schema: <root>: 'echo' is a required property; schema: <root>: 'answers' is a required property; schema: <root>: 'findings' is a required property; schema: <root>: 'requests' is a required property; echo: missingrequest_unanswered request.1: instruction-surface.2/req-dom2pptx-ns: invalid answer output: schema: <root>: Additional properties are not allowed ('error' was unexpected); schema: <root>: 'echo' is a required property; schema: <root>: 'answers' is a required property; schema: <root>: 'findings' is a required property; schema: <root>: 'requests' is a required property; echo: missingrequest_unanswered request.1: instruction-surface.3/req-project-ops-export: invalid answer output: schema: <root>: Additional properties are not allowed ('error' was unexpected); schema: <root>: 'echo' is a required property; schema: <root>: 'answers' is a required property; schema: <root>: 'findings' is a required property; schema: <root>: 'requests' is a required property; echo: missingrequest_unanswered request.1: instruction-surface.3/req-changetemplate-fetch: invalid answer output: schema: <root>: Additional properties are not allowed ('error' was unexpected); schema: <root>: 'echo' is a required property; schema: <root>: 'answers' is a required property; schema: <root>: 'findings' is a required property; schema: <root>: 'requests' is a required property; echo: missingrequest_unanswered request.1: instruction-surface.5/icon-rules-hotupdate: invalid answer output: schema: <root>: Additional properties are not allowed ('error' was unexpected); schema: <root>: 'echo' is a required property; schema: <root>: 'answers' is a required property; schema: <root>: 'findings' is a required property; schema: <root>: 'requests' is a required property; echo: missingrequest_unanswered request.1: instruction-surface.7/skill-md-surface: invalid answer output: schema: <root>: Additional properties are not allowed ('error' was unexpected); schema: <root>: 'echo' is a required property; schema: <root>: 'answers' is a required property; schema: <root>: 'findings' is a required property; schema: <root>: 'requests' is a required property; echo: missingrequest_unanswered request.1: declared-vs-actual.1/req-runflow: invalid answer output: schema: <root>: Additional properties are not allowed ('error' was unexpected); schema: <root>: 'echo' is a required property; schema: <root>: 'answers' is a required property; schema: <root>: 'findings' is a required property; schema: <root>: 'requests' is a required property; echo: missingrequest_unanswered request.2: declared-vs-actual.1/req-projectops: invalid answer output: schema: <root>: Additional properties are not allowed ('error' was unexpected); schema: <root>: 'echo' is a required property; schema: <root>: 'answers' is a required property; schema: <root>: 'findings' is a required property; schema: <root>: 'requests' is a required property; echo: missingrequest_unanswered request.2: declared-vs-actual.1/req-skillfront: invalid answer output: schema: <root>: Additional properties are not allowed ('error' was unexpected); schema: <root>: 'echo' is a required property; schema: <root>: 'answers' is a required property; schema: <root>: 'findings' is a required property; schema: <root>: 'requests' is a required property; echo: missingrequest_unanswered request.3: declared-vs-actual.4/dompptx-sink-scan: invalid answer output: schema: <root>: Additional properties are not allowed ('error' was unexpected); schema: <root>: 'echo' is a required property; schema: <root>: 'answers' is a required property; schema: <root>: 'findings' is a required property; schema: <root>: 'requests' is a required property; echo: missingrequest_unanswered request.4: declared-vs-actual.9/domtopptx-remainder: invalid answer output: schema: <root>: Additional properties are not allowed ('error' was unexpected); schema: <root>: 'echo' is a required property; schema: <root>: 'answers' is a required property; schema: <root>: 'findings' is a required property; schema: <root>: 'requests' is a required property; echo: missingrequest_unanswered request.5: declared-vs-actual.11/dom-to-pptx-net: invalid answer output: schema: <root>: Additional properties are not allowed ('error' was unexpected); schema: <root>: 'echo' is a required property; schema: <root>: 'answers' is a required property; schema: <root>: 'findings' is a required property; schema: <root>: 'requests' is a required property; echo: missingrequest_unanswered request.6: declared-vs-actual.12/req-bundle-tail-1: invalid answer output: schema: <root>: Additional properties are not allowed ('error' was unexpected); schema: <root>: 'echo' is a required property; schema: <root>: 'answers' is a required property; schema: <root>: 'findings' is a required property; schema: <root>: 'requests' is a required property; echo: missingrequest_unanswered request.7: declared-vs-actual.13/bundle-runtime-net: invalid answer output: schema: <root>: Additional properties are not allowed ('error' was unexpected); schema: <root>: 'echo' is a required property; schema: <root>: 'answers' is a required property; schema: <root>: 'findings' is a required property; schema: <root>: 'requests' is a required property; echo: missingrequest_unanswered request.8: declared-vs-actual.18/domppt-net-check: invalid answer output: schema: <root>: Additional properties are not allowed ('error' was unexpected); schema: <root>: 'echo' is a required property; schema: <root>: 'answers' is a required property; schema: <root>: 'findings' is a required property; schema: <root>: 'requests' is a required property; echo: missingrequest_unanswered request.8: declared-vs-actual.31/req-vendor-readme: invalid answer output: schema: <root>: Additional properties are not allowed ('error' was unexpected); schema: <root>: 'echo' is a required property; schema: <root>: 'answers' is a required property; schema: <root>: 'findings' is a required property; schema: <root>: 'requests' is a required property; echo: missingrequest_unanswered request.8: declared-vs-actual.40/req-vendor-readme: invalid answer output: schema: <root>: Additional properties are not allowed ('error' was unexpected); schema: <root>: 'echo' is a required property; schema: <root>: 'answers' is a required property; schema: <root>: 'findings' is a required property; schema: <root>: 'requests' is a required property; echo: missingrequest_unanswered request.8: declared-vs-actual.41/vendor-readme-d29-context: invalid answer output: schema: <root>: Additional properties are not allowed ('error' was unexpected); schema: <root>: 'echo' is a required property; schema: <root>: 'answers' is a required property; schema: <root>: 'findings' is a required property; schema: <root>: 'requests' is a required property; echo: missingrequest_unanswered request.8: declared-vs-actual.42/icon-rules-src: invalid answer output: schema: <root>: Additional properties are not allowed ('error' was unexpected); schema: <root>: 'echo' is a required property; schema: <root>: 'answers' is a required property; schema: <root>: 'findings' is a required property; schema: <root>: 'requests' is a required property; echo: missingrequest_unanswered request.8: declared-vs-actual.43/vendor-readme-claim: invalid answer output: schema: <root>: Additional properties are not allowed ('error' was unexpected); schema: <root>: 'echo' is a required property; schema: <root>: 'answers' is a required property; schema: <root>: 'findings' is a required property; schema: <root>: 'requests' is a required property; echo: missingrequest_unanswered request.9: declared-vs-actual.43/loadhtml2canvas-src: invalid answer output: schema: <root>: Additional properties are not allowed ('error' was unexpected); schema: <root>: 'echo' is a required property; schema: <root>: 'answers' is a required property; schema: <root>: 'findings' is a required property; schema: <root>: 'requests' is a required property; echo: missingrequest_unanswered request.9: declared-vs-actual.43/agent-client-endpoint: invalid answer output: schema: <root>: Additional properties are not allowed ('error' was unexpected); schema: <root>: 'echo' is a required property; schema: <root>: 'answers' is a required property; schema: <root>: 'findings' is a required property; schema: <root>: 'requests' is a required property; echo: missingrequest_unanswered request.9: declared-vs-actual.44/req-save-slide-server: invalid answer output: schema: <root>: Additional properties are not allowed ('error' was unexpected); schema: <root>: 'echo' is a required property; schema: <root>: 'answers' is a required property; schema: <root>: 'findings' is a required property; schema: <root>: 'requests' is a required property; echo: missingrequest_unanswered request.9: declared-vs-actual.45/req-poll-regen-endpoints: invalid answer output: schema: <root>: Additional properties are not allowed ('error' was unexpected); schema: <root>: 'echo' is a required property; schema: <root>: 'answers' is a required property; schema: <root>: 'findings' is a required property; schema: <root>: 'requests' is a required property; echo: missingrequest_unanswered request.9: declared-vs-actual.47/vendor-readme-d29: invalid answer output: schema: <root>: Additional properties are not allowed ('error' was unexpected); schema: <root>: 'echo' is a required property; schema: <root>: 'answers' is a required property; schema: <root>: 'findings' is a required property; schema: <root>: 'requests' is a required property; echo: missingrequest_unanswered request.10: declared-vs-actual.47/speech-manage-head: invalid answer output: schema: <root>: Additional properties are not allowed ('error' was unexpected); schema: <root>: 'echo' is a required property; schema: <root>: 'answers' is a required property; schema: <root>: 'findings' is a required property; schema: <root>: 'requests' is a required property; echo: missingrequest_unanswered request.10: declared-vs-actual.47/svg-edit-tail: invalid answer output: schema: <root>: Additional properties are not allowed ('error' was unexpected); schema: <root>: 'echo' is a required property; schema: <root>: 'answers' is a required property; schema: <root>: 'findings' is a required property; schema: <root>: 'requests' is a required property; echo: missingrequest_unanswered request.10: declared-vs-actual.49/vendor-readme-claim: invalid answer output: schema: <root>: Additional properties are not allowed ('error' was unexpected); schema: <root>: 'echo' is a required property; schema: <root>: 'answers' is a required property; schema: <root>: 'findings' is a required property; schema: <root>: 'requests' is a required property; echo: missingrequest_unanswered request.10: declared-vs-actual.49/dom2pptx-loader: invalid answer output: schema: <root>: Additional properties are not allowed ('error' was unexpected); schema: <root>: 'echo' is a required property; schema: <root>: 'answers' is a required property; schema: <root>: 'findings' is a required property; schema: <root>: 'requests' is a required property; echo: missingrequest_unanswered request.10: declared-vs-actual.50/pptx-post-helper: invalid answer output: schema: <root>: Additional properties are not allowed ('error' was unexpected); schema: <root>: 'echo' is a required property; schema: <root>: 'answers' is a required property; schema: <root>: 'findings' is a required property; schema: <root>: 'requests' is a required property; echo: missingrequest_unanswered request.10: behavior-chains.0/skillmd-middle: invalid answer output: schema: <root>: Additional properties are not allowed ('error' was unexpected); schema: <root>: 'echo' is a required property; schema: <root>: 'answers' is a required property; schema: <root>: 'findings' is a required property; schema: <root>: 'requests' is a required property; echo: missingrequest_unanswered request.11: behavior-chains.5/dom-to-pptx-net-scan: invalid answer output: schema: <root>: Additional properties are not allowed ('error' was unexpected); schema: <root>: 'echo' is a required property; schema: <root>: 'answers' is a required property; schema: <root>: 'findings' is a required property; schema: <root>: 'requests' is a required property; echo: missingrequest_unanswered request.11: behavior-chains.6/req-skill-claim-doc: invalid answer output: schema: <root>: Additional properties are not allowed ('error' was unexpected); schema: <root>: 'echo' is a required property; schema: <root>: 'answers' is a required property; schema: <root>: 'findings' is a required property; schema: <root>: 'requests' is a required property; echo: missingrequest_unanswered request.12: behavior-chains.6/req-bundle-net: invalid answer output: schema: <root>: Additional properties are not allowed ('error' was unexpected); schema: <root>: 'echo' is a required property; schema: <root>: 'answers' is a required property; schema: <root>: 'findings' is a required property; schema: <root>: 'requests' is a required property; echo: missingrequest_unanswered request.12: behavior-chains.8/iframe-sandbox-attr: invalid answer output: schema: <root>: Additional properties are not allowed ('error' was unexpected); schema: <root>: 'echo' is a required property; schema: <root>: 'answers' is a required property; schema: <root>: 'findings' is a required property; schema: <root>: 'requests' is a required property; echo: missingrequest_unanswered request.12: behavior-chains.9/req-skill-doc-claim: invalid answer output: schema: <root>: Additional properties are not allowed ('error' was unexpected); schema: <root>: 'echo' is a required property; schema: <root>: 'answers' is a required property; schema: <root>: 'findings' is a required property; schema: <root>: 'requests' is a required property; echo: missingrequest_unanswered request.12: behavior-chains.9/req-jev-backend: invalid answer output: schema: <root>: Additional properties are not allowed ('error' was unexpected); schema: <root>: 'echo' is a required property; schema: <root>: 'answers' is a required property; schema: <root>: 'findings' is a required property; schema: <root>: 'requests' is a required property; echo: missingrequest_unanswered request.12: behavior-chains.10/claim-visual-mode: invalid answer output: schema: <root>: Additional properties are not allowed ('error' was unexpected); schema: <root>: 'echo' is a required property; schema: <root>: 'answers' is a required property; schema: <root>: 'findings' is a required property; schema: <root>: 'requests' is a required property; echo: missingrequest_unanswered request.12: behavior-chains.10/skill-scripts: invalid answer output: schema: <root>: Additional properties are not allowed ('error' was unexpected); schema: <root>: 'echo' is a required property; schema: <root>: 'answers' is a required property; schema: <root>: 'findings' is a required property; schema: <root>: 'requests' is a required property; echo: missingrequest_unanswered request.12: behavior-chains.11/agent-client-dest: invalid answer output: schema: <root>: Additional properties are not allowed ('error' was unexpected); schema: <root>: 'echo' is a required property; schema: <root>: 'answers' is a required property; schema: <root>: 'findings' is a required property; schema: <root>: 'requests' is a required property; echo: missingrequest_unanswered request.12: behavior-chains.11/antbridge-scope: invalid answer output: schema: <root>: Additional properties are not allowed ('error' was unexpected); schema: <root>: 'echo' is a required property; schema: <root>: 'answers' is a required property; schema: <root>: 'findings' is a required property; schema: <root>: 'requests' is a required property; echo: missingrequest_unanswered request.12: behavior-chains.12/claim-served-locally: invalid answer output: schema: <root>: Additional properties are not allowed ('error' was unexpected); schema: <root>: 'echo' is a required property; schema: <root>: 'answers' is a required property; schema: <root>: 'findings' is a required property; schema: <root>: 'requests' is a required property; echo: missingrequest_unanswered request.12: behavior-chains.12/skill-entry-commands: invalid answer output: schema: <root>: Additional properties are not allowed ('error' was unexpected); schema: <root>: 'echo' is a required property; schema: <root>: 'answers' is a required property; schema: <root>: 'findings' is a required property; schema: <root>: 'requests' is a required property; echo: missingrequest_unanswered request.12: behavior-chains.13/exportpptx-rest: invalid answer output: schema: <root>: Additional properties are not allowed ('error' was unexpected); schema: <root>: 'echo' is a required property; schema: <root>: 'answers' is a required property; schema: <root>: 'findings' is a required property; schema: <root>: 'requests' is a required property; echo: missingrequest_unanswered request.13: behavior-chains.13/dom-to-pptx-bundle: invalid answer output: schema: <root>: Additional properties are not allowed ('error' was unexpected); schema: <root>: 'echo' is a required property; schema: <root>: 'answers' is a required property; schema: <root>: 'findings' is a required property; schema: <root>: 'requests' is a required property; echo: missingrequest_unanswered request.13: behavior-chains.13/set-safe-iframe-content: invalid answer output: schema: <root>: Additional properties are not allowed ('error' was unexpected); schema: <root>: 'echo' is a required property; schema: <root>: 'answers' is a required property; schema: <root>: 'findings' is a required property; schema: <root>: 'requests' is a required property; echo: missingrequest_unanswered request.13: behavior-chains.14/agent-client-destination: invalid answer output: schema: <root>: Additional properties are not allowed ('error' was unexpected); schema: <root>: 'echo' is a required property; schema: <root>: 'answers' is a required property; schema: <root>: 'findings' is a required property; schema: <root>: 'requests' is a required property; echo: missingrequest_unanswered request.14: behavior-chains.14/html2canvas-loader: invalid answer output: schema: <root>: Additional properties are not allowed ('error' was unexpected); schema: <root>: 'echo' is a required property; schema: <root>: 'answers' is a required property; schema: <root>: 'findings' is a required property; schema: <root>: 'requests' is a required property; echo: missingrequest_unanswered request.14: behavior-chains.14/image-absolute-url: invalid answer output: schema: <root>: Additional properties are not allowed ('error' was unexpected); schema: <root>: 'echo' is a required property; schema: <root>: 'answers' is a required property; schema: <root>: 'findings' is a required property; schema: <root>: 'requests' is a required property; echo: missingrequest_unanswered request.15: behavior-chains.14/vision-local-claim: invalid answer output: schema: <root>: Additional properties are not allowed ('error' was unexpected); schema: <root>: 'echo' is a required property; schema: <root>: 'answers' is a required property; schema: <root>: 'findings' is a required property; schema: <root>: 'requests' is a required property; echo: missingrequest_unanswered request.15: behavior-chains.15/skill-doc-local-claim: invalid answer output: schema: <root>: Additional properties are not allowed ('error' was unexpected); schema: <root>: 'echo' is a required property; schema: <root>: 'answers' is a required property; schema: <root>: 'findings' is a required property; schema: <root>: 'requests' is a required property; echo: missingrequest_unanswered request.15: behavior-chains.15/slides-save-route: invalid answer output: schema: <root>: Additional properties are not allowed ('error' was unexpected); schema: <root>: 'echo' is a required property; schema: <root>: 'answers' is a required property; schema: <root>: 'findings' is a required property; schema: <root>: 'requests' is a required property; echo: missingrequest_unanswered request.15: behavior-chains.16/req-enhanced-ppt-service: invalid answer output: schema: <root>: Additional properties are not allowed ('error' was unexpected); schema: <root>: 'echo' is a required property; schema: <root>: 'answers' is a required property; schema: <root>: 'findings' is a required property; schema: <root>: 'requests' is a required property; echo: missingrequest_unanswered request.15: behavior-chains.16/req-safe-iframe: invalid answer output: schema: <root>: Additional properties are not allowed ('error' was unexpected); schema: <root>: 'echo' is a required property; schema: <root>: 'answers' is a required property; schema: <root>: 'findings' is a required property; schema: <root>: 'requests' is a required property; echo: missingrequest_unanswered request.15: behavior-chains.17/req-skill-docs: invalid answer output: schema: <root>: Additional properties are not allowed ('error' was unexpected); schema: <root>: 'echo' is a required property; schema: <root>: 'answers' is a required property; schema: <root>: 'findings' is a required property; schema: <root>: 'requests' is a required property; echo: missingrequest_unanswered request.15: behavior-chains.17/req-tts-backend: invalid answer output: schema: <root>: Additional properties are not allowed ('error' was unexpected); schema: <root>: 'echo' is a required property; schema: <root>: 'answers' is a required property; schema: <root>: 'findings' is a required property; schema: <root>: 'requests' is a required property; echo: missingrequest_unanswered request.15: behavior-chains.18/skill-md-local-claim: invalid answer output: schema: <root>: Additional properties are not allowed ('error' was unexpected); schema: <root>: 'echo' is a required property; schema: <root>: 'answers' is a required property; schema: <root>: 'findings' is a required property; schema: <root>: 'requests' is a required property; echo: missingrequest_unanswered request.16: behavior-chains.18/tools-visual-mode: invalid answer output: schema: <root>: Additional properties are not allowed ('error' was unexpected); schema: <root>: 'echo' is a required property; schema: <root>: 'answers' is a required property; schema: <root>: 'findings' is a required property; schema: <root>: 'requests' is a required property; echo: missingrequest_unanswered request.16: behavior-chains.19/req-ai-send-dest: invalid answer output: schema: <root>: Additional properties are not allowed ('error' was unexpected); schema: <root>: 'echo' is a required property; schema: <root>: 'answers' is a required property; schema: <root>: 'findings' is a required property; schema: <root>: 'requests' is a required property; echo: missingrequest_unanswered request.16: behavior-chains.19/req-domtopptx-path: invalid answer output: schema: <root>: Additional properties are not allowed ('error' was unexpected); schema: <root>: 'echo' is a required property; schema: <root>: 'answers' is a required property; schema: <root>: 'findings' is a required property; schema: <root>: 'requests' is a required property; echo: missingrequest_unanswered request.17: behavior-chains.20/html2canvas-full: invalid answer output: schema: <root>: Additional properties are not allowed ('error' was unexpected); schema: <root>: 'echo' is a required property; schema: <root>: 'answers' is a required property; schema: <root>: 'findings' is a required property; schema: <root>: 'requests' is a required property; echo: missingrequest_unanswered request.17: behavior-chains.21/req-skill-claim-1: invalid answer output: schema: <root>: Additional properties are not allowed ('error' was unexpected); schema: <root>: 'echo' is a required property; schema: <root>: 'answers' is a required property; schema: <root>: 'findings' is a required property; schema: <root>: 'requests' is a required property; echo: missing