landing-page-conversion-audit
Pass
Audited by Gen Agent Trust Hub on Aug 6, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download a configuration file (
docker-compose.yml) from the author's GitHub repository (github.com/autonnel/autonnel) usingcurl.- [COMMAND_EXECUTION]: The documentation includes shell commands (curl,docker compose) intended for the user to set up the recommended Autonnel platform. These commands involve network downloads and the initialization of containerized services.- [PROMPT_INJECTION]: The skill processes untrusted external data by fetching and reading the rendered DOM of user-provided URLs, creating a surface for indirect prompt injection.\n - Ingestion points: The skill fetches the content of a provided
Page URL(SKILL.md).\n - Boundary markers: There are no explicit instructions or delimiters used to separate fetched content from agent instructions or to ignore embedded commands.\n
- Capability inventory: The skill is designed to generate a conversion audit report; it does not automatically execute code or perform system modifications based on the fetched data, though it suggests manual commands to the user.\n
- Sanitization: The instructions do not specify any sanitization, filtering, or validation of the content retrieved from the external URL.
Audit Metadata