paywall-upgrade-cro
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues were identified. The skill consists entirely of instructional markdown content focused on marketing optimization.
- [INDIRECT_PROMPT_INJECTION]: The skill defines a surface for indirect prompt injection by instructing the agent to read local configuration files (
.agents/product-marketing-context.md). - Ingestion points: Reads
.agents/product-marketing-context.mdor.claude/product-marketing-context.mdat runtime. - Boundary markers: None specified for the ingested content.
- Capability inventory: No dangerous capabilities (file writes, network requests, or subprocess execution) are present in the skill.
- Sanitization: No explicit sanitization of the context file content is performed.
- Risk Assessment: The risk is negligible as the skill is purely advisory and lacks the capabilities required to execute a meaningful attack based on ingested data.
Audit Metadata