onboarding-sequences

Pass

Audited by Gen Agent Trust Hub on Oct 10, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves its stated purpose of designing customer onboarding sequences without any detected security vulnerabilities. All external references point to the author's (LeadMagic) own GitHub repository, representing standard vendor documentation.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests user-provided information about products and customer outcomes to generate onboarding designs. While it lacks specific boundary delimiters to isolate this untrusted data from the instruction context, the impact is negligible as the skill lacks high-risk capabilities like network access or sensitive file writes.
  • [COMMAND_EXECUTION]: A local script scripts/check-output.py is included to validate the generated output for specific keywords. The script is benign, performing only basic string matching on a provided file path.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 10, 2026, 12:53 PM