paywall-upgrade-cro
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill consists entirely of instructional Markdown and evaluation data. No scripts, binaries, or automated command executions are included.
- [INDIRECT_PROMPT_INJECTION]: The skill provides a surface for indirect prompt injection by instructing the agent to read
.agents/product-marketing-context.mdfor product context. - Ingestion points: The file
.agents/product-marketing-context.md(or.claude/product-marketing-context.md) is read at the start of the task inSKILL.md. - Boundary markers: Absent; the skill relies on the agent's internal reasoning to use the context.
- Capability inventory: No dangerous tools, subprocess calls, network operations, or file-writing capabilities are present within the skill's own instructions or reference files.
- Sanitization: Absent.
- Risk Assessment: Given the absence of write-access or execution capabilities, this surface is evaluated as safe.
Audit Metadata