page-cro
Pass
Audited by Gen Agent Trust Hub on Apr 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's primary functionality is focused on marketing analysis and does not exhibit malicious patterns.
- [DATA_EXFILTRATION]: The
scripts/conversion_audit.pyscript performs network requests usingurllib.request.urlopento fetch HTML for analysis. This is a documented and necessary feature for remote page auditing. - [INDIRECT_PROMPT_INJECTION]: The skill processes external HTML content, creating a surface for indirect prompt injection.
- Ingestion points: External HTML is fetched via
scripts/conversion_audit.pyfrom user-supplied URLs. - Boundary markers: The audit script converts HTML into structured analysis summaries or JSON, providing a layer of separation.
- Capability inventory: The skill's capabilities are limited to providing textual advice and copy alternatives based on the analysis.
- Sanitization: Content is processed through an HTML parser and filtered via regex for specific marketing signals.
Audit Metadata