evp

Pass

Audited by Gen Agent Trust Hub on Oct 31, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill implements restricted tool access in its configuration.
  • The Bash tool is confined to a specific local Python script path (scripts/score_evp.py) using an environment-relative path.
  • The Write tool is limited to the ./gtm/** directory and specific configuration files (brand-config.json, SOUL.md), which are standard for the skill's purpose.
  • [SAFE]: The skill uses local configuration files for business logic rather than executing remote code or accessing sensitive system credentials like SSH keys or environment secrets.
  • [SAFE]: All external references provided in the documentation link to the author's official project website and GitHub repository, with no signs of typosquatting or obfuscation.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 31, 2026, 05:31 PM