vc-finder

Pass

Audited by Gen Agent Trust Hub on Oct 22, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill makes network requests to Firecrawl (api.firecrawl.dev) and Tavily (api.tavily.com) to fetch webpage content and perform investment research. These are well-known developer services and are consistent with the skill's primary purpose.
  • [COMMAND_EXECUTION]: The skill uses curl and python3 via shell commands to process data, detect funding signals, and synthesize research results. All scripts are distributed with the skill and use locally defined regex patterns or simple JSON parsing.
  • [SAFE]: The skill follows security best practices by recommending the use of .env files for API key management and uses strict local validation (Step 4 and Step 10) to ensure data integrity and prevent hallucinated results. No privilege escalation, persistence mechanisms, or unauthorized data exfiltration patterns were detected.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 22, 2026, 02:06 PM