FA Advisor

This package is internally consistent with its stated purpose, but take these precautions before installing or using it: - Review the package code (fa_advisor/) for any network calls, hardcoded endpoints, or code that would transmit data (look for requests, urllib, socket, httpx, aiohttp). If you see unexplained outbound network activity, do not install. - Install and run in an isolated Python virtualenv or sandbox (or container) so any install-time code executes safely. Use pip install -e . only from the project directory if you trust the source. - Be cautious with the PDF/OCR features: they will read and process any PDF you hand them. Do not feed sensitive or non-redacted financial/legal documents unless you trust the environment and have reviewed the code handling them. - The project documents system dependencies (tesseract, poppler, ghostscript). Installing those grants the package more file/OS-level capability for OCR and PDF processing — install them only if needed. - Check requirements.txt/pyproject.toml for third-party dependencies and inspect them for known vulnerabilities if you plan production use. - If you need stronger assurance, run a network-monitoring or offline test (disconnect network) when first exercising the skill to confirm it behaves as expected. Minor note: the registry metadata said 'instruction-only' but SKILL.md contains an install instruction; that discrepancy is benign but worth noting before publish/install.