pitch-deck-creator

Pass

Audited by Gen Agent Trust Hub on Aug 28, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is a document generation tool that takes structured JSON input and produces a 10-slide PPTX file. The implementation is straightforward and follows the described purpose without hidden functionality.
  • [DATA_EXFILTRATION]: The Python script scripts/generate_pitch_deck.py does not utilize any networking libraries (such as requests, urllib, or sockets). It performs purely local file operations, reading a JSON file and writing a PPTX file.
  • [REMOTE_CODE_EXECUTION]: There are no patterns of remote script downloading or execution. The skill relies on a single verifiable dependency, python-pptx, which is a standard library for presentation generation.
  • [OBFUSCATION]: No obfuscated strings, Base64-encoded payloads, or hidden character techniques (such as zero-width spaces or homoglyphs) were found in any of the skill's files.
  • [COMMAND_EXECUTION]: The script does not invoke shell commands or external binaries. It uses the python-pptx API to build slides programmatically.
  • [CREDENTIALS_UNSAFE]: No hardcoded API keys, tokens, or sensitive credentials were found. The skill does not interact with sensitive system directories or environment variables.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 28, 2026, 02:15 PM
Security Audit — agent-trust-hub — pitch-deck-creator