cpo-advisor
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions direct the agent to execute local Python scripts
scripts/pmf_scorer.pyandscripts/portfolio_analyzer.pyfor product-market fit assessment and portfolio analysis.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes external business data (metrics, user feedback, and portfolio information) through external scripts, creating an attack surface for indirect prompt injection.\n - Ingestion points: External data processed by
scripts/pmf_scorer.pyandscripts/portfolio_analyzer.pyduring PMF and portfolio assessments.\n - Boundary markers: No explicit instructions or delimiters are provided in
SKILL.mdto prevent the agent from following instructions embedded within the processed data.\n - Capability inventory: Ability to execute Python scripts via the
pythoncommand as documented in the Quick Start section.\n - Sanitization: No validation or sanitization mechanisms for the ingested business data are described in the provided instructions.
Audit Metadata