Pitch Deck Visuals
PassAudited by ClawScan on May 1, 2026.
Overview
This instruction-only skill is coherent with making pitch deck visuals, but users should notice that it relies on installing, logging into, and sending deck-rendering inputs to an external inference.sh CLI service.
This skill appears safe to install as an instruction-only pitch deck helper if you are comfortable using inference.sh. Before using it, verify the CLI installer, log in only with the intended account, review generated infsh commands, and avoid sending confidential pitch data unless the provider's privacy and retention terms are acceptable.
Findings (5)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Installing the CLI means trusting a remote script and downloaded binary from inference.sh.
The documented setup runs a remote installer script to add the external CLI. This is disclosed and user-directed, but the installer itself is not included in the reviewed artifacts.
curl -fsSL https://cli.inference.sh | sh && infsh login
Use the manual install and checksum verification path if possible, and install only if you trust the inference.sh source.
Generated work may run under the user's inference.sh account and could use that account's permissions or billing.
The skill expects the user to authenticate to the external inference.sh service. This is normal for the integration, but it gives the CLI access under the user's account.
infsh login
Log in with the intended account, understand any usage costs or account permissions, and avoid sharing credentials with unrelated agents or tools.
If an agent generates an unexpected infsh command, it may do more than render the requested slide visual.
The skill permits Bash use of any infsh command, not only the specific html-to-image examples. This is limited to the infsh CLI and fits the visual-generation purpose, but it is still a broad command surface.
allowed-tools: Bash(infsh *)
Review infsh commands before running them, especially commands beyond the documented rendering examples.
Chart generation may execute Python code through the inference.sh service.
One example uses an external Python executor to generate a market-size chart. Code execution is disclosed and aligned with chart generation, but users should treat it as executable code rather than static design advice.
infsh app run infsh/python-executor --input '{\n "code": "import matplotlib.pyplot as pltOnly run generated Python-executor commands that you understand and that are limited to the intended visual output.
Confidential fundraising, market, traction, or financial information could be submitted to the external rendering service if included in prompts or inputs.
The workflow sends rendering inputs such as HTML, chart data, and potentially pitch-deck content to an external provider. This is disclosed and purpose-aligned, but investor decks can contain sensitive business information.
Create investor-ready pitch deck visuals via [inference.sh](https://inference.sh) CLI.
Avoid sending confidential deck content unless you trust the provider and have reviewed its privacy, retention, and account terms.