popup-cro
Pass
Audited by Gen Agent Trust Hub on Apr 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, prompt injections, or unauthorized operations were detected in the skill instructions. The content is purely educational and focused on marketing optimization.
- [SAFE]: The skill references reading a local file
.claude/product-marketing-context.mdto gather marketing context. This is a standard functional behavior for providing context-aware recommendations and does not target sensitive system files or hardcoded credentials. - [SAFE]: The skill contains an ingestion point for external data from a project context file but lacks dangerous capabilities like network access or command execution. Evidence chain for indirect injection: 1. Ingestion point: .claude/product-marketing-context.md; 2. Boundary markers: absent; 3. Capability inventory: none; 4. Sanitization: absent. The risk is negligible.
Audit Metadata