church-letter Audit report.

Warnings

• Financial research output is not financial advice; require human review before any live investment decision
• SKILL.md depends on `pastor-foundation` and `pastor-setup` skills and a profile at `~/.claude/pastor-profile.md` without documenting install/verification steps for these dependencies.
• `generate-pdf.py` dynamically searches parent directories for `pdf_utils.py` and inserts that path into `sys.path`; if untrusted directories are searched, an unexpected module could be loaded. The dependency path should be pinned or documented.
• SKILL.md does not describe how or when to invoke `generate-pdf.py`, nor does it include the required dependencies (e.g., `reportlab`) or a clear output format for the generated letter.
• The provided SKILL.md excerpt appears truncated, and the frontmatter has no tags or frameworks; the metadata should be completed.
• No explicit limitations are stated beyond the legal-review note; the skill should say it is a drafting aid, not legal or denominational policy advice.
• Financial research output is not financial advice; require human review before any live investment decision.
• Quality score needs review
• GitHub adoption: 50 GitHub stars
• Stars/forks activity: 50 stars, 32 forks; issue activity unavailable in current metadata

Method

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.