cro-methodology
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is comprised of purely instructional Markdown files providing frameworks for website auditing and A/B testing. No executable scripts, binaries, or automation files are present.
- [NO_CODE]: There is no functional code included in this skill, eliminating risks associated with command execution, remote code execution, or privilege escalation.
- [INDIRECT_PROMPT_INJECTION]: The methodology involves gathering and analyzing external, untrusted data (such as customer surveys, chat logs, and support tickets) to identify conversion barriers. This represents a potential surface for indirect prompt injection if an agent were to process this data. However, as the skill provides only high-level instructions and no automated processing logic, the risk is minimal and inherent to the conversion research task.
- Ingestion points: Research methods in 'references/RESEARCH.md' include processing exit surveys, chat logs, and reviews.
- Boundary markers: None specified in the instructions.
- Capability inventory: No scripts or executable capabilities are provided.
- Sanitization: None described.
Audit Metadata