cfo-review
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes three local Python scripts (
burn_rate_calculator.py,unit_economics_analyzer.py, andfundraising_model.py) located in a vendor directory to perform financial stress tests. - [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: User-supplied plan data is ingested via the
<plan>argument in the main command defined inSKILL.md. - Boundary markers: The instructions do not define delimiters or ignore markers to prevent the agent from following instructions embedded within the untrusted plan data.
- Capability inventory: The skill performs subprocess calls to execute Python scripts as specified in the workflow section of
SKILL.md. - Sanitization: There is no evidence of escaping, validation, or filtering applied to the plan content before it is processed by the agent.
Audit Metadata