k2f-pitch-deck
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process user-supplied materials to generate presentation blueprints.
- Ingestion points: Materials such as founder notes, one-pagers, metrics, and TAM sources are inventoried and processed in Step 1.2 of SKILL.md.
- Boundary markers: The instructions do not define explicit delimiters to isolate untrusted user data from the agent's core instructions.
- Capability inventory: The skill relies on the k2f engine to pack, verify, and export presentation files as described in Step 2.
- Sanitization: There is no mention of sanitization or validation of the user-provided content before it is interpolated into the deck structure.
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of a companion dependency from the author's own ecosystem.
- Evidence: SKILL.md contains the instruction 'npx skills add suzheng/k2f --skill k2f'.
Audit Metadata