popup-cro

Pass

Audited by Gen Agent Trust Hub on Sep 18, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill consists entirely of instructional markdown focused on marketing strategies and design principles for popups. No executable scripts, network requests, or sensitive file access patterns were identified.
  • [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to read context from .claude/product-marketing-context.md if it exists. While this represents an ingestion of external data, the skill does not possess any capabilities for network exfiltration, arbitrary command execution, or file writing, which eliminates the threat surface typically associated with this vector.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 18, 2026, 09:34 PM