Pitch
Security checks across static analysis, malware telemetry, and agentic risk
Overview
This pitch-coaching skill is coherent and locally scoped, but it stores business pitch materials on disk and references a few helper files that are not included.
This skill appears safe for local pitch coaching. Before installing, understand that it writes business pitch data and meeting notes to your local OpenClaw workspace, so you should manage those files if they contain confidential strategy. Avoid running any missing or separately sourced helper scripts unless you review them first.
Static analysis
No static analysis findings were reported for this release.
VirusTotal
VirusTotal findings are pending for this skill version.
Risk analysis
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Your business plans, investor preparation, and meeting notes may remain on your local machine after the session.
The skill intentionally persists pitch materials, audience profiles, objections, and meeting notes. This is purpose-aligned, but these materials may contain sensitive business strategy.
All pitch materials stored locally only: `memory/pitch/`
Use the skill only with information you are comfortable storing locally, and periodically review or delete files under the pitch memory folder if they are no longer needed.
Some documented workflows may not work unless additional files are obtained elsewhere, and those additional files were not reviewed here.
SKILL.md references helper scripts and reference documents such as coach_delivery.py that are not included in the supplied file manifest. There is no evidence of automatic download or execution, so this is a completeness/provenance note rather than a security concern.
Use scripts/coach_delivery.py --pitch-id "PITCH-456"
Do not run separately obtained helper scripts unless you trust and review their source; rely on the included scripts for reviewed behavior.