onboarding-cro
Pass
Audited by Gen Agent Trust Hub on Nov 9, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill consists exclusively of markdown documentation and frameworks for user activation and onboarding optimization. No executable scripts, binaries, or external tool configurations are present.
- [NO_CODE]: There is no code shipped with the skill, which eliminates risks associated with remote code execution, dynamic execution, or unauthorized command execution.
- [INDIRECT_PROMPT_INJECTION]: The skill analyzes user-provided data, creating a potential ingestion surface.
- Ingestion points: The agent is instructed to process user-provided onboarding flows, product walkthroughs, and email sequences (referenced in SKILL.md).
- Boundary markers: Absent; the instructions do not specify delimiters or constraints to prevent the agent from following instructions embedded in the user data.
- Capability inventory: None; the skill performs no file writes, network requests, or subprocess executions.
- Sanitization: Absent; no methods for filtering or escaping the input data are defined.
Audit Metadata