signup
Pass
Audited by Gen Agent Trust Hub on Jul 23, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: No attempts to bypass safety filters or override system instructions were detected. The skill uses standard instructional language to define the agent's persona and goals.
- [DATA_EXFILTRATION]: No network operations or sensitive file access patterns were found. While the skill mentions reading context files like
.agents/product-marketing.md, these are standard platform-specific context files and do not represent a security risk. - [OBFUSCATION]: No hidden content, encoded strings, or misleading characters were detected in the instructions or metadata.
- [REMOTE_CODE_EXECUTION]: The skill does not perform any external downloads or execute remote scripts. It is a text-based instruction set.
- [COMMAND_EXECUTION]: No shell commands, subprocess spawning, or administrative operations are present in the skill.
- [PRIVILEGE_ESCALATION]: There are no requests for elevated permissions or attempts to modify system configurations.
- [PERSISTENCE_MECHANISMS]: The skill does not attempt to create cron jobs, modify startup scripts, or establish long-term access to the host environment.
- [INDIRECT_PROMPT_INJECTION]: The skill processes user descriptions of signup flows to provide advice. It lacks the capability to execute code or perform high-risk operations based on this input, making the surface for indirect injection negligible.
- [DYNAMIC_CONTEXT_INJECTION]: No dynamic execution placeholders (like backtick commands) were found in the markdown content.
Audit Metadata