conversion-patterns
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill creates a surface for indirect prompt injection by ingesting external ticket descriptions to recommend monetization and retention strategies.
- Ingestion points: User-provided tickets and the local
data/conversion-rules.jsondata store. - Boundary markers: The skill defines a mandatory structured output format to constrain the agent's response.
- Capability inventory: The skill orchestrates tasks by routing instructions to other agent skills, specifically
vois-patternsfor layout,righterfor copy, andmetrics-taggingfor instrumentation. - Sanitization: The instructions do not specify any validation or sanitization steps for the external ticket data before it is processed by the agent.
- [SAFE]: The Node.js script located in
scripts/check-rule-sync.mjsis a benign utility for ensuring consistency between documentation and data. - The script relies exclusively on built-in Node.js modules (
node:fs,node:url,path) to perform local file comparisons. - No network access or remote execution patterns were detected in the utility logic.
Audit Metadata