ab-test-setup

The skill consists of three markdown files: SKILL.md, references/sample-size-guide.md, and references/test-templates.md. No executable code, scripts, or commands were found in any of these files. The skill's purpose is purely informational, providing instructions, principles, and templates for A/B testing.

1. Prompt Injection: No patterns indicative of prompt injection (e.g., 'IMPORTANT: Ignore', 'override', 'jailbreak' commands) were found in the skill's metadata or content.
2. Data Exfiltration: No commands or patterns for reading sensitive files (e.g., ~/.aws/credentials, ~/.ssh/id_rsa) or exfiltrating data to external servers were detected.
3. Obfuscation: No obfuscation techniques such as Base64 encoding, zero-width characters, Unicode homoglyphs, or malicious URL/hex/HTML encoding were found.
4. Unverifiable Dependencies: The skill does not install or execute any external dependencies. It provides links to well-known, reputable online A/B testing calculators (e.g., Evan Miller's, Optimizely's, VWO's). These are external references for the user, not executable code dependencies for the agent, and are considered safe informational links.
5. Privilege Escalation: No commands for privilege escalation (e.g., sudo, chmod 777, service installation) were found.
6. Persistence Mechanisms: No attempts to establish persistence (e.g., modifying .bashrc, creating cron jobs, or systemd services) were detected.
7. Metadata Poisoning: The skill's metadata (name, version, description) is benign and accurately reflects its purpose.
8. Indirect Prompt Injection: As the skill is purely instructional and does not process external user-supplied data (like emails or web content), the risk of indirect prompt injection is negligible.
9. Time-Delayed / Conditional Attacks: No conditional logic or time-based triggers for malicious behavior were found.

Overall, the skill is a collection of markdown documents providing guidance. It does not contain any active components that could pose a security risk.