popup-cro
Pass
Audited by Gen Agent Trust Hub on Nov 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues or malicious patterns were detected in the skill's content or metadata. The instructions are purely analytical and intended for conversion rate optimization guidance.
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided data such as popup screenshots and implementation details. While this represents a potential ingestion surface for indirect prompt injection, the risk is negligible as the skill lacks capabilities for code execution, file system access, or network operations.
- Ingestion points: User-provided screenshots, descriptions, or implementation details of popups.
- Boundary markers: None explicitly defined in the instructions.
- Capability inventory: No tool-use or executable capabilities are defined or requested in the skill.
- Sanitization: None described in the instructions.
Audit Metadata