ib-pitch-book
OpenDesign's investor pitch book: market map, moat, unit economics, and the ask — analyst-grade and diligence-ready. Built as a decision-grade fundraising pitch deck for growth-equity investors.
58
73%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
High
Do not use without reviewing
Fix and improve this skill with Tessl
tessl review fix ./design-templates/ib-pitch-book/SKILL.mdW008: Secret detected in skill content (API keys, tokens, passwords).
What this means
Detected sensitive credentials directly embedded within the skill content, such as API keys, access tokens, private keys, or service-specific secrets. Secrets should never be hardcoded in plain text within skill instructions.
Why it was flagged
I scanned the skill bundle for literal high-entropy values that could grant access. The only candidate is the Discord invite string in the sample deck (discord.gg/mHAjSMV6gz). This is a literal, non-placeholder invite token (random-looking alphanumeric sequence) that can be used to join a Discord server, so it meets the "provides access to a service" definition of a secret. No API keys, PEM blocks, or other high-entropy credentials were found. I did not flag obvious placeholders, demo text, environment variable names, or low-security example values because they are evident documentation/sample content.
- Repository
- nexu-io/open-design
- Commit
53231d4
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.