form-cro

Pass

Audited by Gen Agent Trust Hub on Sep 18, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is a purely instructional guide focused on conversion rate optimization (CRO) for web forms. It provides best practices for field layout, error handling, and trust-building without any executable scripts or binary files.
  • [INDIRECT_PROMPT_INJECTION]: The skill has a surface for indirect prompt injection as it ingests project context and user-provided form data, but lacks dangerous capabilities to act on malicious instructions.
  • Ingestion points: Reads .claude/product-marketing-context.md and processes user-provided form descriptions and metrics.
  • Boundary markers: Not explicitly defined for the context file or user input.
  • Capability inventory: None; the skill is limited to providing textual recommendations and audit results.
  • Sanitization: No sanitization of ingested content is performed, but impact is negligible due to the lack of dangerous tools.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 18, 2026, 09:35 PM