page-cro

Pass

Audited by Gen Agent Trust Hub on Jul 27, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No security risks identified. The skill follows established patterns for providing domain-specific analysis without requesting excessive permissions or executing shell commands.
  • [SAFE]: No evidence of prompt injection or safety guideline bypass attempts. The instructions are clearly defined and focused on the marketing persona.
  • [SAFE]: No network exfiltration or sensitive data exposure detected. The skill's request to read project context files (.agents/product-marketing-context.md) is a standard practice for local agent configuration and does not target system-level secrets.
  • [SAFE]: No obfuscation, dynamic code execution, or remote dependencies were found in the analyzed files.
  • [SAFE]: The skill's processing of untrusted external content (marketing pages provided by the user) constitutes a low-risk indirect prompt injection surface because the skill lacks the capabilities, such as network access or file-system write permissions, required to act on potentially malicious embedded instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 27, 2026, 03:31 PM