conversion-optimization
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to suggest installing additional components via
npx skills add wondelai/skills/<slug> --global. These resources are managed under the author's namespace and represent standard tool installation. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided data such as analytics reports, customer feedback, and support tickets during the Intake phase. This data informs the optimization strategy and is passed to constituent skills.
- Ingestion points: Intake section in
SKILL.mdwhere users are asked to 'Paste what you have'. - Boundary markers: The skill does not define specific delimiters to isolate user-provided data from agent instructions.
- Capability inventory: The skill is designed to perform file writes to the local
docs/folder and invoke other specialized skills. - Sanitization: No explicit sanitization or validation of the user-provided text is performed.
- [COMMAND_EXECUTION]: The skill refers to the use of the
skillsCLI tool vianpxfor adding new components, which involves executing shell commands to manage the environment.
Audit Metadata