Pitch Screener

Key points to consider before installing/using this skill: - Data exfiltration: pitch_screener.py uploads the entire pitch deck to somark.tech (ASYNC_URL/CHECK_URL) using your SOMARK_API_KEY. If decks contain confidential information (IP, financials, personal data), you must be comfortable sending them to that external service and verify SoMark's privacy/security practices. - Consent/Disclosure: SKILL.md states SoMark will parse the deck but does not explicitly say the file will be uploaded or link to a privacy policy. Confirm you or your organization want this behavior and inform users whose decks you will upload. - Credential scope: Only SOMARK_API_KEY is required — that is expected — but treat the key like a secret: rotate it, limit permissions if possible, and avoid sharing it broadly. - Packaging/runtime: There is no install spec. The script uses the third-party Python library aiohttp which may not be installed in your environment. You'll need a Python runtime and to install dependencies manually (pip install aiohttp). Review the code before running. - Source trust: The skill has no homepage and an unknown source. If you require stronger assurance, ask the publisher for provenance, review SoMark's service documentation, and consider testing with non-sensitive sample decks first. - Alternatives: If you cannot send sensitive decks to a third party, consider local parsing/OCR alternatives or a manual review workflow. If you proceed, verify the SOMARK API's retention/processing policy, test with throwaway data, and audit network traffic or run in an isolated environment first.