pitch-deck-visuals
Warn
Audited by Socket on Oct 18, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The stated purpose mostly matches the capabilities: generating pitch-deck visuals through inference.sh apps is coherent, and the installer/domain provenance appears same-org and official. However, the skill relies on a pipe-to-shell installer, sends user content and auth through a remote CLI service, and instructs the agent to install additional skills, creating transitive trust. This is not fundamentally incompatible with the skill’s purpose, but the execution and trust footprint are broader than a simple presentation-design guide.
Confidence: 89%Severity: 56%
Audit Metadata