infocard Audit report.

Warnings

• Permission surface may require sandboxing
• Financial research output is not financial advice; require human review before any live investment decision
• The metadata.author field contains promotional marketing for 'Markdown Viewer' and an external link instead of a real author or maintainer attribution.
• The skill does not explicitly state that user-provided content must be HTML-escaped and that `<script>`, event handlers, or `javascript:` URLs must never be emitted.
• SKILL.md lacks an explicit 'Limitations / Safety' section covering static HTML-only output, lack of network calls, and renderer compatibility for `<style scoped>`.
• Low GitHub adoption signal
• Financial research output is not financial advice; require human review before any live investment decision.
• Quality score needs review
• Permission surface needs review: shell or command execution, filesystem or document access
• GitHub adoption: 37 GitHub stars
• Stars/forks activity: 37 stars, 2 forks; issue activity unavailable in current metadata
• Permission surface: shell or command execution, filesystem or document access

Method

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.