messaging-ab-tester
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is purely instructional and provides a structured framework for marketing analysis. It does not include any executable scripts, binary files, or network-active commands.
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided messaging and ICP data to generate variants. This represents a standard data ingestion surface. However, the skill lacks high-privilege capabilities such as arbitrary command execution or network exfiltration, making the risk of indirect injection negligible. (Severity: LOW).
- [DATA_EXPOSURE_AND_EXFILTRATION]: No hardcoded credentials, sensitive file paths, or unauthorized network operations were detected. The mention of Smartlead is a legitimate integration for the intended marketing workflow.
- [REMOTE_CODE_EXECUTION]: There are no patterns involving remote script downloads or installations from untrusted sources.
Audit Metadata