popup-cro
Pass
Audited by Gen Agent Trust Hub on Apr 22, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill is entirely text-based and instructional. It contains no scripts, binaries, or commands that could be executed on a host system.
- [NO_CODE]: No code was found within the skill files. The contents are limited to markdown-based instructions and metadata.
- [DATA_EXPOSURE]: No hardcoded credentials or access to sensitive system files were detected. The reference to .agents/product-marketing-context.md is a standard context-reading pattern.
- [PROMPT_INJECTION]: While the skill ingests external data from .agents/product-marketing-context.md, it lacks executable capabilities, minimizing risk. Ingestion points: .agents/product-marketing-context.md (referenced in SKILL.md). Boundary markers: Absent. Capability inventory: None. Sanitization: Absent.
Audit Metadata