onboarding-flow
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill is a pure instructional document (SKILL.md) that provides a framework for designing user onboarding experiences. It does not include any scripts, configuration files, or executables.
- [SAFE]: Analysis of the instructions reveals no attempts at prompt injection, obfuscation, or persistence. The content is consistently aligned with its stated purpose of product activation design.
- [DATA_EXPOSURE]: While the skill reads from 'startup-context', this is a defined platform capability for accessing local project context. No sensitive file paths or credentials are referenced or targeted for extraction.
- [INDIRECT_PROMPT_INJECTION]: The skill has a minimal attack surface for indirect prompt injection. Although it processes user-provided feedback and metrics, it lacks any high-privilege capabilities (file writing, code execution, network requests) that could be exploited by malicious content within those data sources.
Audit Metadata