Is AGIstack/pitch-pro safe?
https://clawhub.ai/AGIstack/pitch-pro
The pitch-pro skill appears to be a legitimate business tool for developing investor and sales pitches. It explicitly commits to local-only data storage and includes appropriate privacy safeguards. The Python scripts perform standard data processing operations without suspicious behavior.
Category Scores
Findings (3)
LOW Executable Python Scripts Present -15 ▶
The skill contains multiple Python scripts that could be executed by the agent. While they appear to perform legitimate data processing functions, they represent potential code execution vectors.
INFO Sensitive Business Data Processing -15 ▶
This skill processes confidential business information including pitch materials, company strategies, and financial data. While it claims local-only storage, users should ensure proper data handling.
INFO Complex Instruction Set -5 ▶
The skill contains extensive instructions and workflow definitions that could potentially obscure malicious directives, though none were detected.