page-cro
Pass
Audited by Gen Agent Trust Hub on Jul 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security risks identified. The skill follows established patterns for providing domain-specific analysis without requesting excessive permissions or executing shell commands.
- [SAFE]: No evidence of prompt injection or safety guideline bypass attempts. The instructions are clearly defined and focused on the marketing persona.
- [SAFE]: No network exfiltration or sensitive data exposure detected. The skill's request to read project context files (.agents/product-marketing-context.md) is a standard practice for local agent configuration and does not target system-level secrets.
- [SAFE]: No obfuscation, dynamic code execution, or remote dependencies were found in the analyzed files.
- [SAFE]: The skill's processing of untrusted external content (marketing pages provided by the user) constitutes a low-risk indirect prompt injection surface because the skill lacks the capabilities, such as network access or file-system write permissions, required to act on potentially malicious embedded instructions.
Audit Metadata