pitch-deck-visuals

Warn

Audited by Gen Agent Trust Hub on Aug 8, 2026

Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill utilizes an external tool called infsh/python-executor to run Python code for generating charts. The code is provided as string literals within the skill body.\n
  • Evidence: Several examples of belt app run infsh/python-executor passing Python code that uses matplotlib to create and save images.\n- [EXTERNAL_DOWNLOADS]: The skill directs users to install external tools and references scripts from third-party repositories.\n
  • Evidence: Suggests installing belt-sh/cli using npx.\n
  • Evidence: Points to a remote installation document at https://raw.githubusercontent.com/inference-sh/skills/refs/heads/main/cli-install.md.\n
  • Evidence: Encourages adding additional skills from the inference-sh organization on GitHub.\n- [COMMAND_EXECUTION]: The skill relies on the belt command-line utility to perform its core functions.\n
  • Evidence: Use of belt login and belt app run throughout the setup and usage guides.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 8, 2026, 08:30 PM
Security Audit — agent-trust-hub — pitch-deck-visuals