signup-flow-cro
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, such as prompt injection, data exfiltration, or obfuscation, were identified. The behavior described is consistent with the skill's stated purpose of providing conversion rate optimization (CRO) advice.
- [EXTERNAL_DOWNLOADS]: The skill refers to
https://github.com/SkeneTechnologies/skene-skillsas an optional extension. This URL targets the official repository of the skill's author, SkeneTechnologies, and is used for supplemental growth audit functions. - [INDIRECT_PROMPT_INJECTION]: The skill requires the agent to read and summarize content from the user's project files. This constitutes a data ingestion surface, but the risk is minimal as the skill does not grant the agent capabilities to perform high-risk actions (such as network requests or file writes) based on that data.
- Ingestion points: Local codebase components matching
*signup*,*register*,*auth*, etc., as specified in the 'Codebase Audit' section of SKILL.md. - Boundary markers: Absent; the instructions do not require the agent to ignore instructions embedded in those target files.
- Capability inventory: The skill is instructional and does not define any programmatic file-writing or network-transmission capabilities.
- Sanitization: None specified.
Audit Metadata