vc-finder
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill makes network requests to Firecrawl (
api.firecrawl.dev) and Tavily (api.tavily.com) to fetch webpage content and perform investment research. These are well-known developer services and are consistent with the skill's primary purpose. - [COMMAND_EXECUTION]: The skill uses
curlandpython3via shell commands to process data, detect funding signals, and synthesize research results. All scripts are distributed with the skill and use locally defined regex patterns or simple JSON parsing. - [SAFE]: The skill follows security best practices by recommending the use of
.envfiles for API key management and uses strict local validation (Step 4 and Step 10) to ensure data integrity and prevent hallucinated results. No privilege escalation, persistence mechanisms, or unauthorized data exfiltration patterns were detected.
Audit Metadata