signup
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: Comprehensive analysis of the instructions and evaluation criteria confirms the skill is purely educational and advisory. It contains no hidden code, obfuscation, or remote execution patterns.
- [INDIRECT_PROMPT_INJECTION]: The skill possesses a data ingestion surface as it audits user-supplied descriptions of signup flows.
- Ingestion points: User-provided flow descriptions and local context files like
.agents/product-marketing.md(specified inSKILL.md). - Boundary markers: None explicitly defined in the prompt templates.
- Capability inventory: The skill is limited to text analysis and recommendation generation; it does not perform network operations, file writes, or shell command execution based on the processed data.
- Sanitization: None detected, but the risk is negligible due to the lack of dangerous capabilities.
Audit Metadata