pitch-deck-visuals
Pass
Audited by Gen Agent Trust Hub on Apr 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
infsh(inference.sh) CLI tool to perform tasks. Theallowed-toolsfrontmatter explicitly restricts shell access to only theinfshcommand, following the principle of least privilege. - [REMOTE_CODE_EXECUTION]: The skill provides examples that use a
python-executortool to run dynamically generated Python scripts. These scripts use thematplotliblibrary to create market size, traction, and competition charts. While this involves dynamic code execution, it is the intended functionality of the specific tool provided by the platform and is used here for static data visualization templates. - [EXTERNAL_DOWNLOADS]: The skill references a remote Markdown file on GitHub (
https://raw.githubusercontent.com/inference-sh/skills/refs/heads/main/cli-install.md) for installation instructions. This is a documentation reference and does not involve automated execution of remote scripts.
Audit Metadata