page-cro
Pass
Audited by Gen Agent Trust Hub on Apr 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's instructions and reference files are dedicated to marketing analysis and do not contain any executable code, shell commands, or network exfiltration patterns. It follows best practices by checking for existing project context before requesting information from the user.- [PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection as it analyzes untrusted content from user-provided marketing URLs. However, the risk is minimal as the skill only performs text-based analysis and lacks capabilities to execute commands or exfiltrate data.
- Ingestion points: Marketing page URLs and content processed by the agent (identified in SKILL.md).
- Boundary markers: No explicit delimiters or instructions to ignore embedded commands are present in the analysis framework.
- Capability inventory: Text-based analysis and recommendation generation; no file system writes or unauthorized network operations are requested.
- Sanitization: No validation or filtering of external content is specified.
Audit Metadata