cto-review
Pass
Audited by Gen Agent Trust Hub on Jun 17, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local Python scripts to assist in the review process.
- Evidence:
python ../../../skills/cto-advisor/scripts/tech_debt_analyzer.pyandpython ../../../skills/cto-advisor/scripts/team_scaling_calculator.pyare called to provide data for the analysis. - Note: These scripts are referenced via relative paths within the skill's own directory structure, which is standard for modular agent skills.
- [DATA_EXPOSURE]: The skill processes architectural plans (
<plan>) which naturally involves handling potentially sensitive engineering and business information. - Evidence: The workflow interrogates tech debt, team scaling models, and build-vs-buy financial decisions.
- Mitigation: The skill correctly recommends involving a CISO advisor for reviews where the data surface changes.
Audit Metadata