funding-digest
Pass
Audited by Gen Agent Trust Hub on May 4, 2026
Risk Level: SAFE
Full Analysis
- Dynamic Dependency Installation: The skill instructs the agent to install well-known Node.js packages (
simple-icons,sharp) at runtime to facilitate image processing and brand icon retrieval. While dynamic installation is a security consideration, the use of reputable packages from standard registries is a common practice for specialized tasks like this. - External Data Integration: The skill fetches financial data, company summaries, and transaction identifiers from S&P Global Capital IQ. This information is used to populate the digest and provide functional links to the Capital IQ platform, adhering to the skill's intended use case as a financial analysis tool.
- Programmatic Content Generation: The skill uses the
pptxgenjslibrary to generate slides through programmatic logic rather than simple text templates. This method is more resilient against accidental data misinterpretation and allows for structured inclusion of external data points like valuation figures and deal dates. - Logo Retrieval Pipeline: The skill implements a two-tier logo strategy that prioritizes local SVG assets from the
simple-iconslibrary and falls back to procedurally generated placeholders usingsharp. This approach minimizes reliance on third-party network requests for images. - Mandatory Safety Disclaimer: The instructions include a requirement for an AI disclaimer in the generated output, promoting transparency by informing the end-user that the content was generated by an AI agent.
Audit Metadata