cto-advisor
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied organizational data and strategy queries, creating a potential surface for indirect prompt injection.
- Ingestion points: User-provided leadership questions and technical strategy details (SKILL.md).
- Boundary markers: None defined to isolate user inputs from system instructions.
- Capability inventory: The agent executes provided calculation scripts (
scripts/tech_debt_analyzer.pyandscripts/team_scaling_calculator.py). - Sanitization: No sanitization of user-provided strategy data is performed before analysis.
Audit Metadata