Skill audit report

anygen Audit report.

AnyGen: AI-powered content creation suite. Create slides/PPT, documents, diagrams, websites, data visualizations, research reports, storybooks, financial analysis, and images. Supports: pitch decks, keynotes, technical docs, PRDs, white papers, architecture diagrams, flowcharts, mind maps, org charts, ER diagrams, sequence diagrams, UML, landing pages, CSV analysis, earnings research, posters, banners, comics, and more. Also trigger when: 做PPT, 写文档, 画流程图, 做网站, 分析数据, 帮我调研, 做绘本, 分析财报, 生成图片, 做海报, 思维导图, 做个架构图, 季度汇报, 竞品调研, 技术方案, 建个落地页, 做个估值, 画个故事.

BLOCKED · BLOCKNeeds reviewGenerated Nov 13, 2026Heuristic metadata audit
72
Audit
65
Trust
64
Quality
71
Security
88
Maintain
92
Install

OpenAgentSkill Trust Score

65
Manual review

OpenAgentSkill Trust Score

The Trust Score helps an agent decide whether a skill is safe enough to shortlist before installation.

GitHub adoption

INFO

62

112 GitHub stars

Stars/forks activity

WARN

57

112 stars, 16 forks; issue activity unavailable in current metadata

Recent maintenance

PASS

88

3mo since push

License clarity

PASS

86

MIT

README/SKILL.md completeness

PASS

86

Metadata includes enough usage and workflow context

Dependency/runtime risk

WARN

46

command execution surface, credential or environment access

Install availability

PASS

92

npx skills add szsip239/teamclaw --skill anygen

Install command safety

PASS

92

standard package or runtime install path

Permission surface

FAIL

22

secrets or environment access, shell or command execution

Repository evidence

PASS

86

https://github.com/szsip239/teamclaw/tree/main/data/skills/anygen-skill

Review status

INFO

66

AI review data available

Agent Proven outcomes

INFO

54

No agent outcome data yet

Checks

Install and adoption review

6 Passed · 16 Needs review

Install path

92

PASS

npx skills add szsip239/teamclaw --skill anygen

Repository

88

PASS

https://github.com/szsip239/teamclaw/tree/main/data/skills/anygen-skill

License

86

PASS

MIT

Maintenance

88

PASS

3mo since push

AI review

55

CHECK

The skill relies on an external service (anygen.io) and requires an API key, which is a potential data exfiltration vector if the service is compromised, but the skill clearly discloses this and limits credential usage to that endpoint.

README/SKILL.md completeness

86

PASS

Usable description available

Dependency risk

46

FIX

command execution surface, credential or environment access

Install command safety

92

PASS

standard package or runtime install path

Permission surface

22

FIX

secrets or environment access, shell or command execution

Stars/forks activity

57

FIX

112 stars, 16 forks; issue activity unavailable in current metadata

Adoption

68

INFO

112 GitHub stars

Financial decision safety

58

CHECK

Research-only use: do not treat output as financial advice or execute a position without human approval.

Warnings

  • Dependency or permission surface needs review
  • Permission surface may require sandboxing
  • Financial research output is not financial advice; require human review before any live investment decision
  • The skill relies on an external service (anygen.io) and requires an API key, which is a potential data exfiltration vector if the service is compromised, but the skill clearly discloses this and limits credential usage to that endpoint.
  • The local rendering step fetches open-source libraries from public CDNs, which could introduce supply-chain risks, though the skill explicitly documents this and suggests network-restricted environments for strict data isolation.
  • Financial research output is not financial advice; require human review before any live investment decision.
  • Quality score needs review
  • Permission surface needs review: secrets or environment access, shell or command execution
  • Stars/forks activity: 112 stars, 16 forks; issue activity unavailable in current metadata
  • Dependency/runtime risk: command execution surface, credential or environment access
  • Permission surface: secrets or environment access, shell or command execution

Method

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.

Compare nearby options

Related skills to audit next