signup-flow-cro
Pass
Audited by Gen Agent Trust Hub on Nov 9, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious patterns or security vulnerabilities were detected. The skill is entirely composed of instructional content and best practices for conversion rate optimization.
- [NO_CODE]: The skill does not include any scripts, binaries, or shell commands. It functions as a specialized knowledge base for the AI agent.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze external data such as URLs, screenshots, and analytics. While this constitutes an ingestion surface for untrusted data, the risk is negligible as the skill lacks any capabilities to perform network operations, file system modifications, or command execution.
- Ingestion points: Analyzes user-provided signup flows via URLs, screenshots, descriptions, or analytics (SKILL.md).
- Boundary markers: No explicit boundary markers or instructions to ignore embedded content are present.
- Capability inventory: None. The skill does not use any tools for file writing, network access, or subprocess execution.
- Sanitization: Not applicable, as the skill's output is limited to text-based recommendations.
Audit Metadata