ccc-marketing

Pass

Audited by Gen Agent Trust Hub on Apr 1, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The prompt_tester.py script in the prompt-engineer-toolkit uses subprocess.run() to allow users to evaluate prompts against local CLI tools. The implementation is secure, using shlex.split() to parse command strings and avoiding the use of a shell (shell=False), which prevents command injection vulnerabilities.
  • [EXTERNAL_DOWNLOADS]: Tools like seo_checker.py and sitemap_analyzer.py utilize urllib.request to retrieve web content for auditing and structural analysis. This behavior is standard for SEO and marketing intelligence tools and is initiated by user-provided URLs.
  • [NO_CODE]: Many components of the collection (e.g., CRO Pod, Strategy Pod) consist purely of high-quality markdown instructions and frameworks, which guide the agent's behavior without executing code.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 1, 2026, 05:35 AM
Security Audit — agent-trust-hub — ccc-marketing