popups
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides purely instructional content for conversion rate optimization of web popups. No executable scripts, binaries, or shell commands are present.
- [SAFE]: The skill references local configuration files like .agents/product-marketing.md to gather relevant marketing context, which is a standard and safe practice for this type of agent. No access to sensitive system paths, hidden keys, or credentials was found.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests user descriptions of their marketing goals to provide advice. However, it lacks high-risk capabilities such as file modification, network access, or command execution, rendering the risk of indirect prompt injection negligible.
Audit Metadata