form-cro
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a purely instructional guide focused on conversion rate optimization (CRO) for web forms. It provides best practices for field layout, error handling, and trust-building without any executable scripts or binary files.
- [INDIRECT_PROMPT_INJECTION]: The skill has a surface for indirect prompt injection as it ingests project context and user-provided form data, but lacks dangerous capabilities to act on malicious instructions.
- Ingestion points: Reads
.claude/product-marketing-context.mdand processes user-provided form descriptions and metrics. - Boundary markers: Not explicitly defined for the context file or user input.
- Capability inventory: None; the skill is limited to providing textual recommendations and audit results.
- Sanitization: No sanitization of ingested content is performed, but impact is negligible due to the lack of dangerous tools.
Audit Metadata