The Agent Skills Directory

[SAFE]: The skill implements a transparent, evidence-based business analysis workflow. All logic is contained within local Python scripts and documentation.
[SAFE]: Python scripts (assemble_report.py, score_metrics.py, render_report.py, validate_report.py) use standard library modules (e.g., json, argparse, pathlib, re) for data processing and string manipulation. No dangerous functions like eval(), exec(), or subprocess calls with untrusted input are used.
[SAFE]: No obfuscation, hidden content, or Base64-encoded strings were found. All URLs in the sample data are visible and point to legitimate business or IR sites (e.g., HubSpot, Shopify, Salesforce).
[SAFE]: The HTML templates are self-contained and do not load external scripts or resources from untrusted domains. User-provided data is sanitized via standard JSON serialization and escaped within the HTML template.
[SAFE]: The metadata in manifest.json and SKILL.md is consistent with the provided functionality, and no suspicious persistence or privilege escalation mechanisms are present.

yao-business-skill