page-cro

The skill consists of two markdown files: SKILL.md and references/experiments.md. Both files are purely descriptive and informational. They do not contain any executable commands, scripts, network requests, or obfuscated content. The SKILL.md file describes a framework for Conversion Rate Optimization (CRO) and references a local markdown file (.claude/product-marketing-context.md) for context, which is a benign local file read within the skill's intended functionality. No sensitive file paths are accessed, and no external dependencies are downloaded or installed. There are no patterns indicative of prompt injection, data exfiltration, privilege escalation, persistence mechanisms, or time-delayed attacks. The skill's metadata is also clean. As the skill's primary function is to analyze provided marketing page content, it is inherently susceptible to indirect prompt injection if the content it analyzes contains malicious instructions, but this is a general risk for any content-processing AI skill and not a specific vulnerability in this skill's design. Overall, the skill is a 'NO_CODE' skill, meaning it relies solely on natural language instructions and poses no direct security risks.