signup-flow-cro
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [NO_CODE]: The skill consists entirely of instructional markdown and does not include any executable scripts, binaries, or code files.\n- [SAFE]: No malicious patterns, prompt injections, or data exfiltration techniques were detected in the instructions or metadata.\n- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest data from an external context file, creating a theoretical attack surface for indirect prompt injection. However, the risk is negligible as the skill lacks any dangerous capabilities (like network access or command execution) that could be exploited via this channel.\n
- Ingestion points: .claude/product-marketing-context.md (referenced in SKILL.md)\n
- Boundary markers: None identified.\n
- Capability inventory: No subprocess calls, exec/eval, file-write, or network operations were found.\n
- Sanitization: None identified.
Audit Metadata