html-ppt-zhangzara-cartesian Rapport d’audit.

Avertissements

• Financial research output is not financial advice; require human review before any live investment decision
• Potential broker, wallet, exchange, or real-money execution surface; sandbox and explicit approval are required
• The provided file listing shows only SKILL.md and template.json, while SKILL.md instructs agents to clone example.html and states that the full MIT LICENSE ships in the skill. If those files are not actually present in the submitted skill package, the workflow is not executable and the license redistribution requirement is not satisfied.
• The template.json excerpt appears truncated at the navigation field, so the complete upstream metadata snapshot could not be fully verified.
• The vendored example.html or asset runtime is not included in the review excerpt, so the inline keyboard handler/JS could not be audited for hidden behavior.
• Financial research output is not financial advice; require human review before any live investment decision.
• This skill may touch real-money trading, broker, wallet, or exchange operations; use only in a sandbox with explicit approval.

Méthode

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.