vpe-advisor

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill includes scripts that ingest external JSON data for engineering metrics analysis. Ingestion points: Data is read from files in scripts/delivery_throughput_analyzer.py, scripts/eng_hiring_funnel_calculator.py, and scripts/eng_team_structure_designer.py. Boundary markers: Absent; data is parsed as structured JSON. Capability inventory: None; the scripts are limited to mathematical calculations and console output using the Python standard library, with no network access, file writing, or command execution capabilities. Sanitization: Absent; standard JSON parsing is used.
  • [SAFE]: The skill's Python scripts are restricted to the standard library and perform only deterministic analysis of management data. No obfuscation, persistence mechanisms, or unauthorized privilege escalation patterns were found.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 04:56 PM