onboarding-cro
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides structured guidance for conversion rate optimization. The included Python script,
activation_funnel_analyzer.py, performs mathematical analysis on local JSON data and prints report summaries to the standard output. It does not establish network connections, access sensitive system files, or execute shell commands. - [INDIRECT_PROMPT_INJECTION]: The skill instructions include a prompt to read
.claude/product-marketing-context.mdif available to gain product context. While this allows for personalization, the ingestion of external data is handled safely as the skill's own code lacks capabilities (network, file-write, or shell execution) that could be exploited by malicious content within that context file. - Ingestion points:
.claude/product-marketing-context.md(SKILL.md) - Boundary markers: None explicitly defined, but usage is limited to informational assessment.
- Capability inventory: The provided Python script is restricted to local data processing and contains no network, system-write, or process-spawning capabilities.
- Sanitization: Not required as no dangerous tools are invoked using the external data.
Audit Metadata