conversion-optimization

Pass

Audited by Gen Agent Trust Hub on Aug 28, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the agent to suggest installing additional components via npx skills add wondelai/skills/<slug> --global. These resources are managed under the author's namespace and represent standard tool installation.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided data such as analytics reports, customer feedback, and support tickets during the Intake phase. This data informs the optimization strategy and is passed to constituent skills.
  • Ingestion points: Intake section in SKILL.md where users are asked to 'Paste what you have'.
  • Boundary markers: The skill does not define specific delimiters to isolate user-provided data from agent instructions.
  • Capability inventory: The skill is designed to perform file writes to the local docs/ folder and invoke other specialized skills.
  • Sanitization: No explicit sanitization or validation of the user-provided text is performed.
  • [COMMAND_EXECUTION]: The skill refers to the use of the skills CLI tool via npx for adding new components, which involves executing shell commands to manage the environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 28, 2026, 12:04 PM
Security Audit — agent-trust-hub — conversion-optimization