fundraising-narrative
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references a plugin hosted at
https://github.com/tjboudreaux/cc-thinking-skills. This is a reference to the author's own repository on a well-known service and does not involve automated execution of untrusted code. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze and assist with user-provided fundraising pitches, which introduces an ingestion surface for untrusted data.
- Ingestion points: User-provided pitch deck content and business narratives processed via the instructions in
SKILL.md. - Boundary markers: None specified in the instructions.
- Capability inventory: The skill does not perform any network operations, file writes, or command executions.
- Sanitization: No explicit sanitization or validation of the user input is defined.
- [SAFE]: The skill's logic is purely instructional and follows established business frameworks. No credential harvesting, privilege escalation, or persistence mechanisms were found.
Audit Metadata