spglobal-funding-digest
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs and utilizes standard, well-known Node.js packages (including 'simple-icons', 'sharp', and 'pptxgenjs') from the official npm registry to facilitate document generation and asset processing. It explicitly avoids using deprecated or unreliable external third-party logo services.
- [COMMAND_EXECUTION]: Instructions include the use of local system utilities and Python scripts (such as 'soffice.py' and 'pdftoppm') to perform visual quality assurance and format conversion on the generated PowerPoint files.
- [DATA_EXFILTRATION]: The skill processes institutional financial data from S&P Global and outputs a local file. There are no patterns suggesting the exfiltration of sensitive user data, environment variables, or system credentials to unauthorized remote domains.
Audit Metadata