popups
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is entirely instructional, focusing on marketing strategies, design principles, and copy formulas for conversion rate optimization. It does not include any scripts, binary files, or network-enabled operations.
- [DATA_EXPOSURE]: The skill instructs the agent to check for local context files such as
.agents/product-marketing.md. This is a routine operation for AI agents to gather project-specific background information and does not involve accessing sensitive system credentials or private user data. - [INDIRECT_PROMPT_INJECTION]: While the skill ingests data from external markdown files (product-marketing context), the resulting output is limited to marketing advice and copy recommendations. There are no high-risk capabilities (such as code execution or file system modifications) that could be exploited via these ingestion points.
Audit Metadata