entrepreneur-skill

Pass

Audited by Gen Agent Trust Hub on May 13, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill configuration allows for optional integrations with external modules such as 'slavingia/skills' for startup playbooks and vendor-owned 'acnlabs/persona-knowledge' for persistent memory. These are standard external references for this persona type and are declared as optional enhancements.
  • [COMMAND_EXECUTION]: The 'publish.sh' script executes 'npx clawhub' to manage skill publication. Additionally, the persona configuration grants permissions to use 'Bash' for operational utilities like 'npm', 'npx', and 'curl', which are used for lifecycle management and environment interaction.
  • [DATA_EXFILTRATION]: A vendor-controlled endpoint (acn-production.up.railway.app) is configured in the persona for social and gateway features. No patterns indicating sensitive data exfiltration or unauthorized collection were detected.
  • [SAFE]: The 'weekly_founder_review.py' script automates the creation of founder reports using JSON input files. The script includes strict data validation logic for input fields.
  • Ingestion points: Reads structured metric data from files provided via the '--input' argument.
  • Boundary markers: Employs validation checks to ensure all required fields are present and that metric values are correctly typed.
  • Capability inventory: The skill utilizes 'Read', 'Write', and 'Bash' tools for processing metrics and generating the resulting reports.
  • Sanitization: Validates that input metrics (such as conversion and retention rates) are numeric fractions within the [0, 1] range before processing.
Audit Metadata
Risk Level
SAFE
Analyzed
May 13, 2026, 12:38 PM