Skills pitch-deck-visuals
📦

pitch-deck-visuals

Content revision r1 Critical ⚙️ External commands🌐 Network access

Create Investor Pitch Deck Visuals

Fundraising decks need clear structure, credible visuals, and concise data slides. This skill provides a 12-slide framework, design rules, and visual examples for investor-ready presentations.

Supports: Claude Codex Code(CC)
⚠️ 38 Poor

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "pitch-deck-visuals" from https://skillstore.io/skills/inference-sh-9-pitch-deck-visuals.md and its manifest at https://skillstore.io/api/skills/inference-sh-9-pitch-deck-visuals/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/inference-sh-9-pitch-deck-visuals.md Signed manifest GET /api/skills/inference-sh-9-pitch-deck-visuals/manifest Signed lockfile GET /api/skills/inference-sh-9-pitch-deck-visuals/lockfile

Test it

Using "pitch-deck-visuals". A founder needs a problem slide about manual reporting costs.

Expected outcome:

A single-number problem slide with a bold metric, short headline, dark background, accent color, and visible source caption.

Using "pitch-deck-visuals". A startup needs a market size slide for investors.

Expected outcome:

A TAM, SAM, and SOM visual using concentric circles, direct labels, restrained colors, and a clear market opportunity title.

Using "pitch-deck-visuals". A team wants to show monthly recurring revenue growth.

Expected outcome:

A line chart recommendation with direct labels, subtle grid styling, a zero-based axis, and a clear growth callout.

Security Audit

Critical
v5 • 7/9/2026 Open versioned report

The audit confirmed a critical pipe-to-shell installer and several external CLI examples that execute inference.sh, Python executor, or npx commands. Several markdown fence detections and the system reconnaissance hit are false positives. The skill also lacks a clear privacy warning before sending confidential pitch content to third-party services.

1
Files scanned
212
Lines analyzed
10
Review items
0
False positives ignored

Confirmed security concerns (2)

Critical
SKILL.md:14
Pipe to shell pattern
curl -fsSL https://cli.inference.sh | sh && infsh login
Line 14 pipes a remote script directly into sh. This pattern bypasses review and can execute arbitrary remote code on the user system.
High
SKILL.md:17-18SKILL.md:108-110SKILL.md:118-120SKILL.md:138-142
Third-Party Processing Of Confidential Pitch Content
The skill sends slide HTML, revenue metrics, market data, and team image prompts through external infsh applications. Pitch decks often contain confidential fundraising data, but the skill does not require consent before third-party processing.
Multiple examples pass investor deck content and metrics to external infsh apps. The file has install notes but no privacy warning or confirmation step for sensitive deck data.
Capability review items (10)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Critical
SKILL.md:13-20
Ruby/shell backtick execution
```bash
The quick start block includes curl piped directly to sh before running the CLI. This downloads and executes remote installer code without local inspection.
Critical
SKILL.md:14
Hardcoded URL
curl -fsSL https://cli.inference.sh | sh && infsh login
The URL is used in a curl pipe-to-shell installer. This is a real remote code execution risk if the endpoint or transport is compromised.
High
SKILL.md:107-111
Ruby/shell backtick execution
```bash
The market size example invokes infsh/python-executor with a Python code payload. Running generated code through an external executor is a real execution risk.
High
SKILL.md:117-121
Ruby/shell backtick execution
```bash
The traction example invokes infsh/python-executor with Python code and revenue data. This is external execution of a supplied code payload.
High
SKILL.md:127-132
Ruby/shell backtick execution
```bash
The competition example invokes infsh/python-executor with a Python code payload. This is real external code execution for chart generation.
Medium
SKILL.md:87-91
Ruby/shell backtick execution
```bash
The title slide example runs infsh app run with embedded HTML. This is intentional external CLI execution and may send slide content to a service.
Medium
SKILL.md:97-101
Ruby/shell backtick execution
```bash
The problem slide example runs infsh app run with embedded HTML containing business claims. This is real external command execution.
Medium
SKILL.md:136-143
Ruby/shell backtick execution
```bash
The team slide example runs infsh app run against falai/flux-dev-lora. It sends prompt data to an external image generation service.
Medium
SKILL.md:205-209
Ruby/shell backtick execution
```bash
The related skills block recommends npx skills add commands. These commands can fetch and install external skill content.
Low
SKILL.md:22
Hardcoded URL
> **Install note:** The [install script](https://cli.inference.sh) only detects your OS/architecture
The install note documents external installer and binary distribution hosts. This is not malicious, but it is a real network trust dependency.

Risk Factors

⚙️ External commands (17)
SKILL.md:13-20 SKILL.md:20-22 SKILL.md:22-87 SKILL.md:87-91 SKILL.md:91-97 SKILL.md:97-101 SKILL.md:101-107 SKILL.md:107-111 SKILL.md:111-117 SKILL.md:117-121 SKILL.md:121-127 SKILL.md:127-132 SKILL.md:132-136 SKILL.md:136-143 SKILL.md:143-205 SKILL.md:205-209 SKILL.md:209-211
🌐 Network access (3)
SKILL.md:9 SKILL.md:14 SKILL.md:22

Detected Patterns

Pipe to shell pattern
Audited by: codex View Audit History →
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/inference-sh-9-pitch-deck-visuals/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/inference-sh-9-pitch-deck-visuals/security.svg)](https://skillstore.io/skills/inference-sh-9-pitch-deck-visuals?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/inference-sh-9-pitch-deck-visuals?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/inference-sh-9-pitch-deck-visuals/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/inference-sh-9-pitch-deck-visuals.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA · BibTeX · CFF)

APA citation

inference-sh-9. (2026). pitch-deck-visuals security audit report (audit version 5) [Author version unspecified]. Skillstore. https://skillstore.io/skills/inference-sh-9-pitch-deck-visuals/audits/5

BibTeX citation

@techreport{inference-sh-9-inference-sh-9-pitch-deck-visuals-2026, author = {inference-sh-9}, title = {pitch-deck-visuals security audit report (audit version 5)}, institution = {Skillstore}, year = {2026}, number = {5}, url = {https://skillstore.io/skills/inference-sh-9-pitch-deck-visuals/audits/5}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "pitch-deck-visuals security audit report (audit version 5)" version: "unspecified" type: report authors: - name: "inference-sh-9" date-released: "2026-07-09" url: "https://skillstore.io/skills/inference-sh-9-pitch-deck-visuals/audits/5" identifiers: - type: other value: "skillstore:inference-sh-9-pitch-deck-visuals:audit:5" description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: Medium
55
Architecture
85
Maintainability
87
Content
69
Community
91
Spec Compliance

What You Can Build

Build Seed Fundraising Decks

Create a clear investor deck structure with focused visuals for problem, solution, market, traction, and ask slides.

Prepare Demo Day Slides

Turn a short startup pitch into concise slides with consistent typography, layout, and chart guidance.

Create Grant Pitch Visuals

Present problem evidence, market context, team credibility, and funding needs in a structured visual format.

Try These Prompts

Draft A Slide Plan 
Create a 12-slide investor pitch deck outline for [company]. Use one idea per slide and include the key visual for each slide.
Design One Slide 
Design a problem slide for [company] using one key statistic, a concise headline, and a suggested visual layout.
Improve Existing Slides 
Review this pitch deck outline and identify slides with too much text, weak data, or unclear investor logic: [outline].
Create A Visual System 
Create a complete visual direction for a seed deck, including typography, color rules, chart choices, and slide-by-slide treatments for [company].

Best Practices

  • Use one main message per slide and remove text that does not change the investor decision.
  • Cite every market, traction, and problem statistic with a visible source.
  • Confirm data privacy before sending confidential metrics or team details to external generation tools.

Avoid

  • Do not use pie charts, dense feature matrices, or slides with more than six bullets.
  • Do not paste confidential fundraising data into external tools without approval.
  • Do not treat generated visuals as evidence for claims without checking the underlying data.

Frequently Asked Questions

Does this skill create a complete deck file?
No. It provides structure, design rules, and visual generation examples, but it does not assemble an editable presentation file.
Which pitch stages does it support?
It is most useful for pre-seed, seed, demo day, and early Series A fundraising decks.
Can it help with charts?
Yes. It recommends chart types for market size, traction, competition, and key metric slides.
Does it verify business data?
No. Users must verify revenue, market size, customer, and source claims before presenting them.
Does it require external services?
The guidance can be read without services, but visual generation examples use inference.sh and related apps.
Is it safe for confidential decks?
Use caution. Remove confidential data or get approval before sending deck content to external generation services.

Developer Details

License

MIT

Skillstore revision

r1

Version notice

The author did not declare a version.

Repository

https://github.com/inference-sh-9/skills/tree/main/skills/pitch-deck-visuals/

Ref

3e4b6c31a74a3bd1a291c98cf585d720cb9fbc88

Maintenance freshness

7/18/2026

Usage

5 downloads · 123 views

File structure

📄 SKILL.md