iasv/deal-evaluate
Two-tier dealflow evaluation: research dossier (15-25 pages) and executive memo (5-7 pages) with anti-bias MoE layer, True Potential Council, and arithmetic verification
67
84%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Low
Low-risk findings worth noting
Low
Low-risk findings.
1 low severity finding. Worth noting, but not necessarily harmful.
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
The skill's required workflow explicitly performs WebSearches (Step 2 market/biographical/competitive/VC researchers) and auto-fills gaps from public websites (Invocation notes "uses web search" and the Research Dossier includes a SOURCE INDEX of URLs), so untrusted public web and user-generated content are ingested and directly influence scoring and investment decisions.
Where we found it
industry reports (TAM/SAM data)
content-type · 2 sites
The Market researcher step explicitly instructs WebSearch for TAM/SAM data from industry reports, which are untrusted public web sources that directly feed into scoring.
SKILL.md
85
1. WebSearch for TAM/SAM data, cross-reference with industry reports
SKILL.md
86
2. Dossier output: TAM/SAM/SOM table with sources, market growth data, regulatory landscape, 5+ tailwinds/risks with evidence, adjacent market opportunities
founder LinkedIn profiles and public biographical sources
content-type · 3 sites
The Biographical researcher step explicitly instructs WebSearch for founder LinkedIn, prior companies, publications, patents, and media appearances - all untrusted public web sources that directly feed into founder assessment and scoring.
SKILL.md
90
1. WebSearch founder LinkedIn, prior companies, publications, patents, media appearances, verify key claims, check for red flags
SKILL.md
91
2. Dossier output: Full founder profiles (education, career timeline, exits, board seats, domain expertise evidence, references found, social proof)
SKILL.md
40
**Enhanced with:** Pitch deck, meeting notes, data room materials, founder LinkedIn URLs, deal terms.
competitor websites, funding data, product comparisons
content-type · 2 sites
The Competitive analyst step explicitly instructs WebSearch for competitors, mapping positioning, analyzing funding, product comparisons, and customer overlap - all untrusted public web sources that directly feed into competitive scoring.
SKILL.md
95
1. WebSearch competitors, map positioning, analyze funding, product comparisons, customer overlap
SKILL.md
96
2. Dossier output: Full competitive landscape (10+ competitors if available), feature comparison matrix, funding history per competitor, market share estimates, threat analysis
general web search for gap-filling (invocation)
content-type · 2 sites
The Invocation explicitly states the skill "uses web search to fill gaps" and the Research Dossier includes a SOURCE INDEX of all URLs and search queries used, confirming untrusted public web content is ingested and influences decisions.
SKILL.md
31
Auto-discovers materials in the folder, extracts company name, uses web search to fill gaps.
SKILL.md
140
14. SOURCE INDEX (all URLs, search queries used, data freshness dates)
- Audited
- Security analysis