ceo-advisor
Pass
Audited by Gen Agent Trust Hub on May 6, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill includes legitimate strategic and financial analysis tools designed for executive leadership support. All logic is transparent and matches the stated purpose.
- [SAFE]: The Python scripts (
strategy_analyzer.pyandfinancial_scenario_analyzer.py) utilize standard libraries (json,math,datetime) to perform calculations locally. They do not initiate network requests, access sensitive system files, or use dynamic execution functions likeevalorexec. - [SAFE]: No obfuscation, hidden URLs, or hardcoded credentials were detected across the skill's markdown files or scripts.
- [INDIRECT_PROMPT_INJECTION]: The skill exhibits an attack surface for indirect prompt injection by instructing the agent to ingest external data from
company-context.md. - Ingestion points:
SKILL.md(mandatory reading ofcompany-context.md). - Boundary markers: Absent; the skill does not specify delimiters or instructions to ignore embedded commands within the context file.
- Capability inventory: The skill possesses the ability to execute local scripts and invoke other agent roles.
- Sanitization: Absent; content is processed directly. (Note: This is a common design pattern and is assessed as safe in this context).
Audit Metadata