ClawHub
Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

AfrexAI Pitch Deck Reviewer

v1.0.0

Reviews pitch decks and provides investor-ready feedback with scoring

⭐ 0· 702·0 current·0 all-time
by@1kalin
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name and description (pitch deck review) align with the SKILL.md instructions: scoring sections, output format, and concrete rules for feedback. No unrelated credentials, binaries, or config paths are requested.
✓
Instruction Scope
Runtime instructions stay within the domain of reviewing pitch decks (scoring, strengths/weaknesses, investor questions). The doc asks the agent to handle text/slides/description but does not instruct reading arbitrary system files, environment variables, or sending data to external endpoints beyond optional referenced tools/links.
✓
Install Mechanism
There is no install spec and no code files; this is instruction-only which minimizes disk-write risk. The SKILL.md references third-party links and an optional 'clawhub install' command for another skill, but it does not perform any download itself.
✓
Credentials
The skill requests no environment variables, credentials, or config paths. Nothing in the instructions implies a need for secrets or elevated access.
✓
Persistence & Privilege
Flags are default (always: false, agent can invoke autonomously). The skill does not request persistent presence, system-wide changes, or modification of other skills' configs.
Assessment
This skill appears coherent and low-risk: it only provides instructions for reviewing pitch decks and does not request credentials or install code. Before using, consider: (1) do not submit highly sensitive IP or unreleased financial documents to any third party if you must keep them confidential; (2) the SKILL.md links to external tools and a separate skill install command—if you follow those, review those third-party pages/packages for privacy and permissions; (3) if you plan to let the agent access slide files, confirm where uploads are stored/processed by your agent platform. If you need higher assurance, request source code or an explicit privacy policy from the skill author.

Like a lobster shell, security has layers — review code before you run it.

latestvk9706fa9znkr9wmvch67a8mbah812vbr

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments