popup-cro
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists entirely of instructional markdown focused on marketing strategies and design principles for popups. No executable scripts, network requests, or sensitive file access patterns were identified.
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to read context from
.claude/product-marketing-context.mdif it exists. While this represents an ingestion of external data, the skill does not possess any capabilities for network exfiltration, arbitrary command execution, or file writing, which eliminates the threat surface typically associated with this vector.
Audit Metadata