cpo-advisor

Pass

Audited by Gen Agent Trust Hub on Apr 12, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No malicious patterns or security risks were detected during the analysis.
  • The skill provides educational content and local tools for product strategy and market-fit analysis.
  • [COMMAND_EXECUTION]: The skill provides instructions to run local Python scripts for data analysis.
  • Evidence: SKILL.md contains command-line instructions: python scripts/pmf_scorer.py and python scripts/portfolio_analyzer.py.
  • Script Review: Analysis of scripts/pmf_scorer.py and scripts/portfolio_analyzer.py confirms they only use standard Python libraries (such as json, sys, argparse, and math) to process user-supplied data files and perform calculations.
  • [DATA_EXPOSURE_AND_EXFILTRATION]: No network activity or credential harvesting was detected.
  • The included scripts do not contain network-related libraries, outbound communication logic, or hardcoded secrets.
  • [REMOTE_CODE_EXECUTION]: No external code downloads or remote execution patterns were found.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 12, 2026, 08:16 AM
Security Audit — agent-trust-hub — cpo-advisor