investor-materials
Pass
Audited by Gen Agent Trust Hub on Aug 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is entirely instructional, providing a framework for creating investment documents. It does not contain any executable code, obfuscated content, or persistence mechanisms.
- [COMMAND_EXECUTION]: The skill references tools such as
pitch-deck,ppt-maker, andemail-opsto generate files and send communications. These are used within the context of the skill's primary purpose and do not suggest arbitrary command execution or privilege escalation. - [DATA_EXPOSURE]: While the skill processes sensitive business and financial data, it explicitly mandates a 'Single Source of Truth' and requires the agent to confirm data conflicts with the user before proceeding, which serves as a safety boundary.
- [EXTERNAL_DOWNLOADS]: The skill mentions using well-known services like SiliconFlow, Pexels, and Pixabay for image generation and footage. These are reputable services and do not constitute a security risk in this context.
Audit Metadata