investor-pitch-planner
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a pure instruction set designed to help users organize business information into a fundraising pitch outline. It does not perform any sensitive operations such as file system access, network communication, or command execution.
- [DATA_EXPOSURE]: The skill prompts users to provide business-sensitive information like traction metrics, revenue, and team backgrounds. This is necessary for the intended purpose of the skill and does not constitute a security violation, as there are no mechanisms for data exfiltration detected.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests user-provided text to populate a markdown template. While this constitutes an attack surface, the skill lacks any 'tools' or 'capabilities' (like code execution or web browsing) that could be exploited via injection.
Audit Metadata