signup-flow-cro
Pass
Audited by Gen Agent Trust Hub on Jul 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill instructions in SKILL.md focus on providing UX and conversion rate optimization (CRO) guidance. No malicious prompt injection, data exfiltration, or obfuscation patterns were found.
- [PROMPT_INJECTION]: The script
scripts/funnel_drop_analyzer.pypresents a surface for indirect prompt injection as it processes external JSON data from files or standard input. However, the risk is negligible as the script is limited to mathematical calculations and console output. - Ingestion points: The script reads JSON data via
sys.stdinor a user-specified file path inanalyze_funnel. - Boundary markers: No specific boundary markers or delimiters are used in the generated report output.
- Capability inventory: The script is restricted to reading local files, parsing JSON, and printing results; it contains no network, shell, or subprocess execution capabilities.
- Sanitization: Input is handled via the standard Python
jsonlibrary, which safely parses structured data.
Audit Metadata