popup-cro

Pass

Audited by Gen Agent Trust Hub on Aug 17, 2026

Risk Level: SAFENO_CODE
Full Analysis
  • [PROMPT_INJECTION]: The skill uses natural instructional language to define the agent's role as a CRO expert. No bypass markers, override instructions, or jailbreak attempts were detected.
  • [DATA_EXPOSURE_AND_EXFILTRATION]: No hardcoded credentials or sensitive file paths are present. The skill references a local context file (.claude/product-marketing-context.md) for gathering project information, which is a standard and safe practice for providing contextual advice. No network operations were found.
  • [OBFUSCATION]: The content is clear and uses standard Markdown formatting. No hidden Base64 strings, zero-width characters, or homoglyphs were identified.
  • [UNVERIFIABLE_DEPENDENCIES_AND_REMOTE_CODE_EXECUTION]: The skill does not include any package installations, remote script downloads, or dynamic code execution patterns.
  • [INDIRECT_PROMPT_INJECTION]: While the skill ingests external data from a context file and user input, its purpose is limited to generating consultative UX/UI advice. It does not possess capabilities (like file writing or command execution) that could be exploited via malicious data ingestion.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 17, 2026, 12:36 PM