create-pitch-deck

SUSPICIOUS. The core deck-generation behavior is aligned with the stated purpose, but the telemetry design is inconsistent with the consent claim because remote logging may happen before prompting, and the POST target is an arbitrary config-driven endpoint rather than a fixed official domain. No malware-like payload execution or credential harvesting is shown, but privacy and data-flow controls are weaker than they should be.