stelow-product-paywall

Pass

Audited by Gen Agent Trust Hub on Oct 23, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill primarily consists of instructional content regarding product-market fit, paywalls, and onboarding funnels. There are no executable scripts with malicious intent.
  • [DYNAMIC_CONTEXT_INJECTION]: The ## Entry (mode detection) section contains a shell script snippet. This script is intended to detect environment variables (STELOW_WORKFLOW and STELOW_STATE) to determine the execution mode. It performs no network operations, file modifications, or sensitive data access.
  • [INDIRECT_PROMPT_INJECTION]: While the skill is designed to process user-provided metrics (e.g., download counts and conversion rates) for diagnosis, it has no tool access or network capabilities, making the risk of exploitation through external data negligible.
  • [REMOTE_CODE_EXECUTION]: There are no patterns involving remote script downloads or execution from untrusted sources. All content is static reference material.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 23, 2026, 03:01 AM