marketing-landing-page-conversion-audit

Pass

Audited by Gen Agent Trust Hub on Oct 7, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted data from external sources.
  • Ingestion points: The skill accepts a 'Landing page URL or screenshot' and 'Ad Headline' as primary inputs (SKILL.md).
  • Boundary markers: The instructions do not specify any delimiters or warnings for the agent to ignore potentially malicious instructions embedded within the target landing page content.
  • Capability inventory: Based on the SKILL.md content, the skill does not utilize sensitive capabilities like arbitrary command execution, file system writing, or outbound network requests beyond fetching the target URL.
  • Sanitization: There is no evidence of input validation or sanitization for the external content before it is processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 7, 2026, 11:57 PM