AI Proposal Generator

This skill appears internally consistent and low-risk, but review these practical points before installing or using it: - Local file access: the skill reads meeting-notes/, MEMORY.md, and proposals/SERVICES.md and writes drafts, final HTML, and custom templates under proposals/. Make sure those folders don't contain secrets or unrelated sensitive data (API keys, account numbers, etc.). - Outbound requests from generated HTML: the provided HTML templates link to Google Fonts (fonts.googleapis.com / fonts.gstatic.com). When recipients open the HTML, their browsers will contact those external hosts (IP exposure). If you need fully offline/self-contained proposals, modify templates to use embedded or local fonts. - No credentials requested: the skill does not ask for API keys or tokens. If a later version asks for unrelated credentials (cloud keys, email SMTP creds, etc.), treat that as a red flag unless justified. - PDF export: SKILL.md mentions "export pdf" but there is no install step for a PDF tool. Check how your agent/environment will perform HTML→PDF conversion (local binary, cloud service, or built-in capability) to avoid accidentally sending proposal content to an external conversion service. - Review templates and SERVICES.md: the shipped templates and examples contain placeholder text and example pricing — customize them before sending to clients. Overall this is a coherent, instruction-only skill; exercise normal caution about local files and outbound font requests, and verify any future changes that add network calls or credential requirements.