paywall-upgrade-cro
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [NO_CODE]: The skill is composed exclusively of Markdown instructions and reference files. No scripts, binaries, or automated shell commands are included.
- [SAFE]: No evidence of prompt injection, data exfiltration, obfuscation, or persistence mechanisms was found. All instructions align with the stated purpose of providing conversion rate optimization (CRO) expertise.
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to read an external configuration file for context, creating a potential surface for indirect injection.
- Ingestion points: Reads
.claude/product-marketing-context.md(SKILL.md). - Boundary markers: None identified for the file read operation.
- Capability inventory: None; the skill does not request access to tools, network services, or file-writing operations.
- Sanitization: None identified. However, the risk is negligible due to the absence of exploitable capabilities within the skill.
Audit Metadata