html-ppt-zhangzara-blue-professional Audit report.

Warnings

• Financial research output is not financial advice; require human review before any live investment decision
• Potential broker, wallet, exchange, or real-money execution surface; sandbox and explicit approval are required
• The SKILL.md does not explicitly instruct the agent to treat user-provided slide content as data, so a malicious prompt could inject HTML/script into the generated deck.
• The provided file list does not show example.html or LICENSE, even though SKILL.md references both; these files must actually ship with the skill for the workflow and license compliance to be complete.
• The SKILL.md name, description, and triggers are heavily scoped to a QBR/board-review use case, which may hide the template's broader usefulness for B2B SaaS pitches, consulting deliverables, and investor reports.
• Financial research output is not financial advice; require human review before any live investment decision.
• This skill may touch real-money trading, broker, wallet, or exchange operations; use only in a sandbox with explicit approval.

Method

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.