create-pitch-deck

SUSPICIOUS: the core deck-generation, local file reads, research, and HTML output align with the stated purpose, but the built-in telemetry is not well-scoped. It sends usage metadata to a user-configured remote endpoint and does so in the preamble before first-run consent, creating a meaningful data-flow integrity issue despite otherwise coherent functionality.