cpo-advisor
Pass
Audited by Gen Agent Trust Hub on Apr 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security risks were detected during the analysis.
- The skill provides educational content and local tools for product strategy and market-fit analysis.
- [COMMAND_EXECUTION]: The skill provides instructions to run local Python scripts for data analysis.
- Evidence:
SKILL.mdcontains command-line instructions:python scripts/pmf_scorer.pyandpython scripts/portfolio_analyzer.py. - Script Review: Analysis of
scripts/pmf_scorer.pyandscripts/portfolio_analyzer.pyconfirms they only use standard Python libraries (such asjson,sys,argparse, andmath) to process user-supplied data files and perform calculations. - [DATA_EXPOSURE_AND_EXFILTRATION]: No network activity or credential harvesting was detected.
- The included scripts do not contain network-related libraries, outbound communication logic, or hardcoded secrets.
- [REMOTE_CODE_EXECUTION]: No external code downloads or remote execution patterns were found.
Audit Metadata