best-practices-pitchdeck
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a Python script
scripts/measure_deck_architecture.pyand a shell scriptrun.shto execute it. The script uses thepython-pptxlibrary to analyze local.pptxfiles and provide structural metrics (slide counts, divider positions, etc.). These tools perform legitimate, deterministic measurements aligned with the skill's primary purpose. - [DATA_EXPOSURE]: The skill references a multimodal index in Qdrant (
pitchdeck_house_slides_v1) and a project state ($project-state). These are used as context for the agent to compare generated content against established project guidelines and previous slides. No sensitive credentials or unauthorized data access patterns were observed. - [EXTERNAL_DOWNLOADS]: The
pyproject.tomlanduv.lockfiles list standard, well-known Python dependencies includingpython-pptx,loguru, andtyper. These are fetched from official registries and are appropriate for the script's functionality.
Audit Metadata