skills/alvindean/soniq/cmo-advisor/Gen Agent Trust Hub

cmo-advisor

Pass

Audited by Gen Agent Trust Hub on Sep 4, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill acts as a strategic advisor for CMO-level tasks such as brand positioning and growth modeling. It operates entirely on provided text and internal logic without making external requests.
  • [SAFE]: The included Python utilities (marketing_budget_modeler.py and growth_model_simulator.py) are limited to mathematical simulations. They use only Python standard libraries and do not interact with the file system, network, or external processes.
  • [INDIRECT_PROMPT_INJECTION]: The skill provides a surface for indirect prompt injection by reading external company context. 1. Ingestion points: The file company-context.md is ingested as context for strategy generation. 2. Boundary markers: The skill does not define specific delimiters or instructions to ignore embedded commands in the context file. 3. Capability inventory: No scripts or instructions in this skill have the capability to perform network requests, write to the file system, or execute arbitrary shell commands. 4. Sanitization: The skill does not explicitly sanitize the context data, but the absence of dangerous sinks mitigates the risk.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 4, 2026, 01:32 PM